agent-sql
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements significant safety measures for database operations. It defaults to read-only mode and requires explicit
--writeflags and validated credentials for any modifications. Security is reinforced via database-specific drivers (e.g.,SQLITE_OPEN_READONLYfor SQLite, read-only transactions for PostgreSQL). - [SAFE]: Credential management follows security best practices. The skill explicitly instructs users not to paste secrets into the LLM context, instead utilizing a
--formflag to trigger native OS dialogs that keep passwords outside of the agent's visibility. - [SAFE]: Network access is restricted to established database drivers (PostgreSQL, MySQL, Snowflake, etc.) and is used exclusively for its primary purpose of database querying and schema exploration.
Audit Metadata