agent-sql

SUSPICIOUS. The skill’s stated purpose is coherent for SQL exploration, and its direct data flows to databases are proportionate, but its core dependency is an unverifiable `agent-sql` binary that receives credentials/tokens and executes queries. That black-box trust requirement dominates the assessment and raises this to high security risk despite otherwise reasonable scope and safety guidance.