skill-scan_skill

Overview

This skill lets you run SQL queries safely against a database using parameterized statements. It focuses on preventing SQL injection and returning structured results suitable for further processing. The implementation is in Python and designed for integration into automation workflows or chat-based agents. It is lightweight and intended for querying archived or backup datasets securely.

How this skill works

You provide a parameterized SQL statement and a set of parameters; the skill binds parameters to placeholders and executes the statement against the configured database driver. Results are returned as rows with consistent column names, and errors are reported clearly without exposing raw stack traces. Connections are managed to avoid resource leaks and the skill enforces prepared statements to block injection.

When to use it

• Running read-only queries on archived or backup databases.
• Embedding database queries inside an automation pipeline or chat agent.
• Retrieving structured datasets for reporting or transformation.
• When you need to avoid building raw SQL strings with user input.
• Quick ad-hoc exploration of database tables without risk of injection.

Best practices

• Always use parameter placeholders provided by the DB driver rather than string interpolation.
• Limit the skill's database credentials to least privilege (read-only if possible).
• Validate and sanitize high-level inputs (e.g., expected columns, row limits) before building queries.
• Use pagination or LIMIT clauses for large result sets to avoid memory spikes.
• Log query metadata (timing, row counts) but never log raw parameter values containing secrets.

Example use cases

• Fetch the latest 100 rows from an archived transactions table for audit review.
• Return user profile fields by ID using a parameterized SELECT to feed a chat response.
• Aggregate counts by status for a backup dataset to build a dashboard.
• Filter logs stored in a historical database by date range provided by an analyst.
• Power an automation that exports query results to CSV or a BI tool.