skills/shhac/agent-skills/agent-sql/Gen Agent Trust Hub

agent-sql

Pass

Audited by Gen Agent Trust Hub on Aug 31, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill implements significant safety measures for database operations. It defaults to read-only mode and requires explicit --write flags and validated credentials for any modifications. Security is reinforced via database-specific drivers (e.g., SQLITE_OPEN_READONLY for SQLite, read-only transactions for PostgreSQL).
  • [SAFE]: Credential management follows security best practices. The skill explicitly instructs users not to paste secrets into the LLM context, instead utilizing a --form flag to trigger native OS dialogs that keep passwords outside of the agent's visibility.
  • [SAFE]: Network access is restricted to established database drivers (PostgreSQL, MySQL, Snowflake, etc.) and is used exclusively for its primary purpose of database querying and schema exploration.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 31, 2026, 09:39 PM
Security Audit — agent-trust-hub — agent-sql