The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides insecure code templates that are vulnerable to SQL Injection.
In references/express-middleware-integration.md and SKILL.md.original, the Node.js example directly interpolates the userId parameter into a SQL query: db.query(\SELECT * FROM users WHERE id = ${userId}`)`.
In references/python-sentry-integration.md and SKILL.md.original, the Python example uses an f-string to inject the order_id parameter into a SQL query: db.query(f'SELECT * FROM orders WHERE id = {order_id}').
[DATA_EXFILTRATION]: The identified SQL Injection vulnerabilities allow for unauthorized access to the database, which can be exploited to exfiltrate sensitive user and order data.
[EXTERNAL_DOWNLOADS]: The skill documentation includes commands to install official Sentry components.
Installs the @sentry/cli globally and the @sentry/node and @sentry/tracing packages locally via npm.
These resources are associated with Sentry, a well-known technology service.

error-tracking