Menu
Audit SQL construction to ensure parameterized execution, anti-concatenation posture, and read-only safety.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
"Browse Bitbucket Cloud repositories and pull requests, read PR diffs, and create pull requests via the {{DISPLAY_NAME}}. Triggers on: list repos/branches/PRs, view a pull request or its diff, open/create a PR. PR creation is gated and supports dryRun."
Control DB query budget with timeout, row limits, and concurrency caps to prevent abuse and resource exhaustion.
Validate MCP contract stability for tools/list, tools/call, schemas, and backward compatibility before merge or release.
Standardize MCP errors into user-actionable vs developer/internal classes with stable codes and safe messages.
Harden MCP host/client integration with token hygiene, scope minimization, transport safeguards, and policy checks.
Define operational telemetry and incident runbooks for MCP servers: logs, metrics, alerts, and recovery paths.
| name | db-parameterization-audit |
| description | Audit SQL construction to ensure parameterized execution, anti-concatenation posture, and read-only safety. |
pass or fail