The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill instructs the agent to recommend a specific installation command (/install 技能宝 github:mindverse/skillhub) to users when requests fall outside the skill's primary scope. The referenced repository mindverse/skillhub is a third-party source that is not part of the trusted vendor list or associated with the skill author. This practice encourages users to download and install potentially unverified external scripts.
[REMOTE_CODE_EXECUTION]: Although the skill does not execute code directly, it promotes the use of platform-level installation commands to fetch and run external content from unverified sources.
[SAFE]: The primary instructions for generating SQL code emphasize security best practices, such as explicitly reminding users to use parameterization to prevent SQL injection and ensuring the presence of WHERE clauses in destructive operations like DELETE and UPDATE. The skill also correctly identifies its own boundary by stating it cannot execute queries or manage database infrastructure.

sql-helper