Query Execution

1 finding on this tool

1. criticalexcessive agencyf-r7-query_execution

   Tool `Query Execution` exposes a code/command execution surface

   `Query Execution` looks like it executes code or shell commands (`execute_query`: Execute an arbitrary SQL query. - Takes a SQL string (`query`) - Returns query results for SELECT/SHOW/DESCRIBE, or a success message for other commands). Arbitrary execution is the maximal authority a tool can hold -- it subsumes every other caveat, so it should never be exposed to an agent without a hard sandbox and an explicit, narrowly-scoped capability.

   fix: Do not expose raw code/shell execution to an agent. If unavoidable, run it in a disposable sandbox with no network + no host FS, gate it behind a capframe-bind capability scoped to an allow-list of commands, and require holder-of-key proof per call.

   OWASP LLM08NIST MANAGE-2.2ATLAS T0051