Security audit
MySQL AIops
Security checks for vulnerabilities and agentic risk
Overview
This database assistant needs review because its guidance suggests destructive-action confirmations are handled, but those safeguards apply only to the CLI.
Start with a dedicated monitoring account. Before granting maintenance privileges, require explicit approval for MCP writes in your agent client; CLI confirmations do not protect that path. Protect the master password and use certificate-verified TLS for remote databases.
SkillSpector was not run because this plugin release contains no bundled skills.
Static analysis
No suspicious patterns detected.