mssql-cli
Fail
Audited by Socket on Mar 9, 2026
1 alert found:
Obfuscated FileObfuscated FileSKILL.md
HIGHObfuscated FileHIGH
SKILL.md
The mssql-cli skill aligns with its stated purpose of querying SQL Server databases by parsing connection strings into CLI flags and orchestrating query execution via standard CLI tools. The main security considerations are credential handling (passwords on the CLI, potential exposure in logs or process listings) and reliance on external binaries not controlled by the skill. There are no evident data exfiltration pathways or unauthorized network calls. Overall, the footprint is coherent for a developer tooling helper, but the credential handling pattern warrants best-practice mitigation (prefer env vars or interactive prompts, ensure redaction, document secure usage).
Confidence: 98%
Audit Metadata