The Agent Skills Directory

[SAFE]: The skill contains legitimate T-SQL examples (CTEs, Window Functions, MERGE) and diagnostic queries for SQL Server management. No malicious behaviors or bypass techniques were detected.
[CREDENTIALS_UNSAFE]: The Node.js integration example demonstrates standard security practices by using environment variables (process.env.SQL_USER, process.env.SQL_PASSWORD) for database authentication rather than hardcoding credentials.
[COMMAND_EXECUTION]: The skill promotes the use of parameterized queries (request.input) to prevent SQL injection attacks, which is the primary security recommendation for database interaction.

sqlserver-expert