database-connect
Facilitates efficient database integration and management for PostgreSQL, MySQL, and MongoDB, optimizing token usage for queries and inspections.
Install this skill
Security score
The database-connect skill was audited on Feb 9, 2026 and we found 22 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 351 | console.log(`✓ Query completed in ${duration}ms`); |
Template literal with variable interpolation in command context
| 352 | console.log(` Rows: ${result.rowCount}`); |
Template literal with variable interpolation in command context
| 360 | console.log(`... and ${result.rows.length - 100} more rows`); |
Template literal with variable interpolation in command context
| 411 | ```bash |
Template literal with variable interpolation in command context
| 530 | console.log(`✓ Using database: ${config.database}`); |
Template literal with variable interpolation in command context
| 534 | console.log(`✓ Using collection: ${config.collection}`); |
Template literal with variable interpolation in command context
| 546 | console.log(`✓ Found ${docs.length} documents`); |
Template literal with variable interpolation in command context
| 553 | console.log(`✓ Count: ${count}`); |
Template literal with variable interpolation in command context
| 559 | console.log(`✓ Distinct values for ${field}:`); |
Template literal with variable interpolation in command context
| 566 | console.log(`✓ Aggregation results: ${results.length} documents`); |
Template literal with variable interpolation in command context
| 576 | console.log(` - ${col.name}`); |
Template literal with variable interpolation in command context
| 692 | let query = `SELECT ${this.columns.join(', ')} FROM ${this.table}`; |
Template literal with variable interpolation in command context
| 695 | query += ` WHERE ${this.conditions.join(' AND ')}`; |
Template literal with variable interpolation in command context
| 699 | query += ` ORDER BY ${this.orderColumn} ${this.orderDirection}`; |
Template literal with variable interpolation in command context
| 703 | query += ` LIMIT ${this.limitCount}`; |
Template literal with variable interpolation in command context
| 727 | ```bash |
Access to .env file
| 36 | - Invalidate on config file changes (.env, schema.prisma, etc.) |
Access to .env file
| 115 | if [ -f ".env" ]; then |
Access to .env file
| 116 | echo "✓ .env file found" |
Access to .env file
| 118 | if grep -q "DATABASE_URL\|POSTGRES\|MYSQL" .env; then |
Access to .env file
| 382 | const connectionString = process.env.DATABASE_URL || process.argv[3]; |
Access to .env file
| 590 | const uri = process.env.MONGODB_URI || process.argv[2]; |