Mysql Db Reader — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Mysql Db Reader (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Read-only MySQL tools for xmcp. Connect via a connection-string env var; all operations are read-only.
pnpm i
pnpm buildSet one of (first found wins): MYSQL_URL, MYSQL_CONNECTION_STRING, or DATABASE_URL.
export MYSQL_URL="mysql://user:password@localhost:3306/mydb"Add to your mcp.json (use an absolute path to dist/stdio.js):
{
"mcpServers": {
"mysql-reader": {
"command": "node",
"args": ["/ABSOLUTE/PATH/TO/mysql-reader/dist/stdio.js"],
"env": { "MYSQL_URL": "mysql://user:password@host:3306/db" }
}
}
}pnpm devThen point your MCP client to http://localhost:3002/mcp.
To use a different port (e.g., 3001):
export MYSQL_URL="mysql://user:password@localhost:3306/mydb"
PORT=3001 pnpm devExample HTTP client config (TOML):
[mcp_servers.mysql-reader]
transport = "http"
url = "http://127.0.0.1:3001/mcp"
project = "/ABSOLUTE/PATH/TO/your/project"mysql_list_databases(includeSystem=false) — list databasesmysql_list_tables(database, includeViews=true) — list tables/viewsmysql_get_table_schema(database, table) — columns/constraints/indexesmysql_preview_table(database, table, limit=50, orderBy?) — sample rowsmysql_query(sql, params?) — read-only SQL (SELECT/SHOW/DESC/EXPLAIN/WITH), max 10k rowsmysql_explain_query(sql) — EXPLAIN a SELECTTool names use lowercase snake_case (underscores, no dots) to comply with Codex's tool name pattern ^[a-zA-Z0-9_-]+$ (Codex models prefer lower_snake). See: MCP in Codex docs
Read-only is enforced via session settings and SQL guards.
Docs: xmcp docs
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.