cisco-ai-defense/skill-scanner99 installs
database-query
Query database safely with parameterized statements
How do I install this agent skill?
npx skills add https://github.com/cisco-ai-defense/skill-scanner --skill database-queryIs this agent skill safe to install?
- Gen Agent Trust Hubfail
This skill contains severe SQL injection vulnerabilities in its Python implementation. Despite documentation claiming the use of safe parameterized statements, the code uses dangerous string concatenation via f-strings, allowing for arbitrary database manipulation and unauthorized data access.
- Socketpass
No alerts
- Snykfail
Risk: CRITICAL · No issues
- Runlayerwarn
3/3 files flagged
What does this agent skill do?
Database Query Skill
Safely query databases using parameterized statements.
Usage
Provide query parameters and get results safely.
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/cisco-ai-defense/skill-scanner/database-query">View database-query on skillZs</a>