Security audit
Security checks for vulnerabilities and agentic risk
The skill is a generic planning checklist with an overbroad SQL-themed description, but it contains no executable behavior, persistence, credential handling, or hidden data access.
Install only if you want a generic planning and quality-gate checklist. Do not rely on it for SQL performance tuning, safe query rewrites, schema changes, or database-specific safety checks without separate expert review.
The skill advertises SQL diagnosis and query rewriting, but its body provides only a generic project workflow with no SQL-specific safeguards, analysis steps, or domain constraints. This mismatch can cause an agent or user to rely on the skill for database changes without receiving the promised specialized guidance, increasing the chance of unsafe or incorrect query recommendations.
The activation description is broad enough to match many ordinary development requests, not just SQL performance diagnosis. Over-broad routing increases the likelihood that the wrong skill is invoked, which can displace more appropriate safety- or domain-specific guidance and lead to poor or risky recommendations in unrelated contexts.
The body defines a generic reusable workflow without trigger boundaries, exclusions, or SQL-specific constraints, making the skill applicable far beyond its stated purpose. In an automated skill-selection environment, this ambiguity can cause misapplication and over-trust, especially when users expect specialized database guidance that the content does not actually provide.
No suspicious patterns detected.
