Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/xamirhamza77/reverseops-skill/database-securitynpx skills add xAmirHamza77/ReverseOps-Skill --skill database-securitygit clone --depth 1 https://github.com/xAmirHamza77/ReverseOps-SkillWhat it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00037 | $0.00402 |
| Opus 5 | $0.00018 | $0.00201 |
| Sonnet 5 | $0.00007 | $0.00080 |
| Haiku 4.5 | $0.00004 | $0.00040 |
Grade A, and why
database-security scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
Database Security Assessment
ACTION REQUIRED (Execute immediately after reading)
NOW: Read precedent-pentest; destructive statements on production databases are prohibited unless explicitly permittedNOW: The scope must clearly state instances, account permissions, and whether write/delete is allowedNEXT: Client tool pathsACT: Exposure surface → Authentication → Authorization → Configuration → Exploit chain validation (safe)
Applicable Scenarios
- Database unauthorized/weak password/incorrect binding to 0.0.0.0
- Excessive permissions, dangerous features (xp_cmdshell, COPY PROGRAM, UDF)
- Lateral movement: From application account to DBA
- NoSQL injection and Redis file writing, etc. (authorized environments)
Workflow
□ Network exposure and TLS
□ Account roles and grantees
□ Sensitive table access control
□ Dangerous configurations: file_priv, xp_cmdshell, load_file
□ Are audit logs enabled?
□ Backup and snapshot permissions
Toolchain
| Tool | Purpose |
|---|---|
| Official CLIs | Connection and enumeration |
| sqlmap | Injection validation (authorized) |
| nuclei | Known exposure templates |
| Cloud RDS console audit | Configuration |
References
references/db-misconfig-checklist.md../pentest-tools/../cloud-k8s/
Routing Context
Upstream: MASTER R35
Downstream: Gaining OS command → attack-chain; Cloud managed → cloud-k8s
Task Completion Self-Check
- Was unauthorized write/delete avoided?
- Were configuration issues and exploitable chains differentiated?
- Checklist completed?
What ships with it
1 file beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 2d ago First seen · 56 lines · 37 tokens per session scan A 82889cd861d7
database-security is a skill published in the GitHub repository xAmirHamza77/ReverseOps-Skill (4 stars, last pushed 1mo ago), licensed MIT. It adds 37 tokens to every session and 402 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
tencent-pg-inspection
Run routine health inspection for Tencent Cloud PostgreSQL by calling Tencent Cloud OpenAPI directly. This skill can use the full aligned PostgreSQL OpenAPI action set documented in @references/apireference.md. Start with evidence collection first, and require explicit confirmation before any write, fee-impacting, or…
tencent-pg-ops-troubleshooter
Troubleshoot operational issues for Tencent Cloud PostgreSQL by calling Tencent Cloud OpenAPI directly. This skill can use the full aligned PostgreSQL OpenAPI action set documented in @references/apireference.md. Start with evidence collection first, and require explicit confirmation before any write, fee-impacting…
tencent-pg-slowquery-diagnosis
Diagnose slow SQL and performance anomalies for Tencent Cloud PostgreSQL by calling Tencent Cloud OpenAPI directly. This skill can use the full aligned PostgreSQL OpenAPI action set documented in @references/apireference.md. Start with evidence collection first, and require explicit confirmation before any write…
requirement-alignment
Use when analyzing a requirement/PRD (分析需求/解析需求/解析PRD/分析PRD), building state machines (画状态机), sequence diagrams (时序图), decision tables (决策表) or DDL from a spec, or resuming an interrupted requirement analysis (用户说"继续") - drives the three-level intent-alignment funnel (code evidence, registered inference, structured…
guardian-cache
Store temporary agent state and cached API results in Redis using enforced mema: namespaces and TTL controls. Use when session data or expensive intermediate results must be shared across steps or sub-agents.
prisma-cli
Prisma ORM CLI commands reference covering init, generate, migrate, db, dev, complete, studio, validate, format, debug, and mcp. Use for ORM/database CLI workflows, not the Prisma Platform CLI. Triggers on "prisma init", "prisma generate", "prisma migrate", "prisma db", "prisma complete", "prisma studio", "prisma mcp".