Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review.
Automate repetitive workflows and reduce manual effort
Example: Generate reports, summarize documents, draft communications
Save 3-5 hours per week on routine tasks
Learn new skills, understand complex topics, get expert guidance
Example: Explain concepts, provide examples, suggest learning resources
Accelerate learning and skill development by 2x
Enhance output quality through reviews, suggestions, and refinements
Example: Review drafts, suggest improvements, catch errors
Improve work quality by 30-40% with less effort
Time estimate: 15-45 minutes depending on use case complexity
Prerequisites
Submit your Claude Code skill and start earning
epx add zhaoxuya520/reverse-skill/skills/database-securityCompatible with
Supported agents
| name | database-security |
| description | Use for authorized database security assessment covering PostgreSQL/MySQL/MSSQL/Mongo/Redis exposure, authz, UDF/command paths, and misconfiguration review. |
NOW: 读取 precedent-pentest；生产库禁止破坏性语句 unless 明确允许NOW: scope 写清实例、账号权限、是否允许写/删NEXT: 客户端工具路径ACT: 暴露面 → 认证 → 授权 → 配置 → 利用链验证（安全）□ 网络暴露与 TLS
□ 账号角色与 grantee
□ 敏感表访问控制
□ 危险配置：file_priv、xp_cmdshell、load_file
□ 审计日志是否开启
□ 备份与快照权限
| 工具 | 用途 |
|---|---|
| 官方 CLI | 连接与枚举 |
| sqlmap | 注入验证（授权） |
| nuclei | 已知暴露模板 |
| 云 RDS 控制台审计 | 配置 |
references/db-misconfig-checklist.md../pentest-tools/ ../cloud-k8s/上游: MASTER R35
下游: 获 OS 命令 → attack-chain；云托管 → cloud-k8s
AI-first code editor with Composer
Before installing skills in Cursor, ensure your development environment meets these requirements:
node --versiondatabase-securityExecute the skills CLI command in your project's root directory to begin installation:
epx add zhaoxuya520/reverse-skill/skills/database-securityFetches database-security from zhaoxuya520/reverse-skill and configures it for Cursor.
The CLI shows a list of agents. Use arrow keys and space to select Cursor:
Confirm successful installation by checking the skill directory location:
.cursor/skills/database-security
Restart Cursor to activate database-security. Access via /database-securityin your agent's command palette.
Learn more:View source on GitHubSkills CLI docsAbout CursorWhat are agent skills?
Steps
Common Pitfalls
✓ Do
✗ Don't
💡 Pro Tips
✓ Use when
Use when skill capabilities match your task, clear ROI on time saved, and you can validate outputs. Best for repetitive tasks, learning, and quality improvement.
✗ Avoid when
Avoid when task requires deep expertise you can't validate, involves sensitive decisions, or when learning process is more valuable than speed of completion.
pentest-tools
zhaoxuya520/reverse-skill · security · same repo
dotnet-reverse
zhaoxuya520/reverse-skill · security · same repo
docs-generator
zhaoxuya520/reverse-skill · security · same repo
thick-client
zhaoxuya520/reverse-skill · security · same repo
cloud-k8s
zhaoxuya520/reverse-skill · security · same repo
protocol-reverse
zhaoxuya520/reverse-skill · security · same repo
Keeps context tight: database-security is the kind of skill you can hand to a new teammate without a long onboarding doc.
database-security has been reliable in day-to-day use. Documentation quality is above average for community skills.
database-security fits our agent workflows well — practical, well scoped, and easy to wire into existing repos.
Solid pick for teams standardizing on skills: database-security is focused, and the summary matches what you get after install.
Useful defaults in database-security — fewer surprises than typical one-off scripts, and it plays nicely with `npx skills` flows.
Registry listing for database-security matched our evaluation — installs cleanly and behaves as described in the markdown.
database-security is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
database-security has been reliable in day-to-day use. Documentation quality is above average for community skills.
Keeps context tight: database-security is the kind of skill you can hand to a new teammate without a long onboarding doc.
database-security is among the better-maintained entries we tried; worth keeping pinned for repeat workflows.
showing 1-10 of 52