Scan Report
0 /100
SQLFormat
SQL query formatter, linter, and devtools toolkit for formatting, linting, and pretty-printing SQL with dialect conversion
SQLFormat is a straightforward local logging tool that records SQL-related developer workflow entries to flat-text log files with no external network access, credential handling, or hidden functionality.
Safe to install
This skill is safe to use. It operates entirely offline with filesystem:WRITE permissions for its own log directory.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | scripts/script.sh: lines 65-180 use cat, tail, grep, wc to read log files |
| Filesystem | WRITE | WRITE | ✓ Aligned | scripts/script.sh: lines 17-18 mkdir and echo to ~/.local/share/sqlformat/ |
| Shell | READ | READ | ✓ Aligned | scripts/script.sh uses date, wc, du, cut, tail, grep, sed, cat, basename — all d… |
2 findings
Medium External URL 外部 URL
https://bytesagain.com SKILL.md:6 Info Email 邮箱地址
[email protected] SKILL.md:127 File Tree
2 files · 15.9 KB · 440 lines Shell 1f · 313L
Markdown 1f · 127L
├─
▾
scripts
│ └─
script.sh
Shell
└─
SKILL.md
Markdown
Security Positives
✓ No network access — operates entirely offline
✓ Pure bash implementation with no external dependencies
✓ All commands documented in SKILL.md are present in script.sh
✓ No credential harvesting or environment variable enumeration
✓ No remote code execution, no base64, no obfuscation
✓ Writes restricted to dedicated ~/.local/share/sqlformat/ directory
✓ Uses set -euo pipefail for safe bash execution