Skills/ClawHub/dbq

dbq@1.4.0

VERIFIED· install only

Publisher claims: "Multi-database SQL assistant — query MySQL, PostgreSQL, SQLite & MariaDB across dev/test/prod environments with a single command. Security-first: read-only b..." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry ClawHubPublisher yinpengfei · publishing for 131 daysInstalls 687Last detonated 3d ago
$clawhub install dbq
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Access to sensitive file pathsSKILL.md:73 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files| `${VAR}` 占位 | `password: ${PWD_PROD}` | `.env` 的 `PWD_PROD` 变量 | **多库共享密码（推荐）** |Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/db_config.py:17 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesENV_FILE = ASSETS_DIR / ".env"Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:80 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files- **永远不要用 Read 工具直接读取 `assets/connections*.yaml` 或 `assets/.env`。**Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/db_config.py:23 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# ClawHub 安全策略不收录 .yaml / .env 文件，模板内容内嵌到代码中，Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:66 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files**密码不存入任何 YAML 配置文件。** 脚本按优先级自动查找：Keychain > `.env` 变量 > 环境变量。Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 编辑 assets/.env 填入 DB_PWD_DEV_RECHARGE_DB=xxx 等Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsSKILL.md:61 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# b) .env 文件 (--init-config 已生成):Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandSKILL.md:53 · File permission modification command — agent changes file ownership/permissions# Prod 建议额外 chmod 600 (--init-config 已自动设置):Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsscripts/db_config.py:113 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files".env": r"""# 数据库密码配置文件Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/db_config.py:30 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 2. password: ${MY_SHARED_PASS} → 从 assets/.env 或环境变量中解析（多库共用推荐）Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test.py:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files4. 密码解析链 (Keychain > .env > 环境变量)Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
Python subprocess execution detectedscripts/query.py:204 · Python subprocess execution detectedsubprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
MEDIUM
File permission modification commandscripts/db_config.py:92 · File permission modification command — agent changes file ownership/permissions"connections.prod.yaml": r"""# 生产环境数据库连接配置（独立文件，建议 chmod 600）Fix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
HIGH
Access to sensitive file pathsscripts/test.py:134 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesmode="w", suffix=".env", delete=FalseFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/db_config.py:29 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 1. 不写 password 字段 → 通过 Keychain/.env/环境变量 约定查找 DB_PWD_DEV_{ALIAS}Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test.py:169 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filescheck(".env 变量解析", conns["db1"]["password"] == "secret123")Fix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test.py:254 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system filesmode="w", suffix=".env", delete=FalseFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
HIGH
Access to sensitive file pathsscripts/test.py:131 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files# 写一个临时 .envFix: Stop enumerating or reading credential locations; take secrets from a declared environment variable the user sets on purpose.
AST05
MEDIUM
File permission modification commandSKILL.md:54 · File permission modification command — agent changes file ownership/permissionschmod 600 assets/connections.prod.yamlFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
File permission modification commandscripts/db_config.py:115 · File permission modification command — agent changes file ownership/permissions# 编辑填入实际密码后: chmod 600 .envFix: Request the narrowest permission that works; replace wildcards with the exact paths or hosts.
AST05
MEDIUM
Python subprocess execution detectedscripts/db_config.py:216 · Python subprocess execution detectedresult = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05

Cost to the agent

Instructions loaded
≈1,855 tok
1 file · 11 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

Vulnerability advisories (OSV) cover npm and PyPI packages; this registry has no advisory database.