Security audit
Security checks across malware telemetry and agentic risk
This is a legitimate database-query helper, but it can give an agent broad access to production databases without enough safeguards.
Install only if you are comfortable letting an agent run SQL against the databases you configure. Use least-privilege, preferably read-only database users by default; keep production and test names unambiguous; review any UPDATE, DELETE, DROP, ALTER, INSERT, or privilege-changing query before it runs; and prefer SSH keys plus pinned host keys for sensitive hosts.
def execute_mysql_query(host: str, port: int, database: str, user: str, password: str, query: str) -> bool:
"""Execute MySQL query using mysql command-line client with environment variable for password."""
# Use environment variable for password to avoid exposure in process list
env = os.environ.copy()
env['MYSQL_PWD'] = password
mysql_cmd = []
try:
result = subprocess.run(
mysql_cmd,
capture_output=True,
text=True,61/61 vendors flagged this skill as clean.
No suspicious patterns detected.