database-query — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited database-query (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
通过 Evotown Database MCP Proxy 查询企业已注册数据库。Skill 不持有连接串；权限由 Evotown ACL + Proxy 校验。
connection_idEVOTOWN_DB_MCP_URL，默认 http://localhost:9100）| action | 说明 |
|---|---|
list_connections | 列出当前员工可访问的数据库 |
list_tables | 列出某库的表 |
query | 执行只读 SELECT（Proxy 自动加 LIMIT，拒绝 INSERT/UPDATE/DELETE） |
{
"action": "list_connections",
"api_key": "evk_..."
}{
"action": "list_tables",
"connection_id": "crm-demo",
"api_key": "evk_..."
}{
"action": "query",
"connection_id": "crm-demo",
"sql": "SELECT id, name, amount FROM orders WHERE status = 'paid'",
"api_key": "evk_..."
}也可设置环境变量 EVOTOWN_EMPLOYEE_API_KEY，省略 api_key 字段。
entry_point: scripts/main.py
language: python
network:
enabled: true
outbound:
- "*:9100"
- "*:8765"
input_schema:
type: object
properties:
action:
type: string
enum: [list_connections, list_tables, query]
default: query
connection_id:
type: string
description: Evotown 注册的 connection_id
sql:
type: string
description: 只读 SELECT / WITH / EXPLAIN 语句
api_key:
type: string
description: 员工 evk_ API Key（可改用环境变量 EVOTOWN_EMPLOYEE_API_KEY）
required: []~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.