How does it determine if a database is secure?

The skill evaluates the database against OWASP security guidelines, checking for common risks like insecure default settings, weak passwords, and SQL injection vulnerabilities.

Can this skill automatically fix security issues?

Yes, in addition to identifying vulnerabilities, the skill provides remediation suggestions and, where possible, automated scripts to help you resolve the issues.

Which databases are supported by this skill?

The Database Security Scanner currently supports PostgreSQL and MySQL databases.

Does Claude need specific permissions to run a scan?

Yes, for the scanner to function, Claude must be provided with the necessary database credentials and network permissions to access the target system.

Database Security Scanner

Name: Database Security Scanner
Author: jeremylongshore

byjeremylongshore

•

884

Security & Testing

Performs comprehensive security audits and vulnerability assessments for PostgreSQL and MySQL databases using OWASP standards.

About

This skill empowers Claude to automatically scan your database infrastructure for critical security risks, including SQL injection vulnerabilities, weak authentication methods, and insecure configurations. By mapping findings directly to OWASP compliance standards, it provides developers and security engineers with detailed assessment reports and actionable remediation scripts to proactively fortify database security posture.

Key Features

Comprehensive OWASP compliance reporting and auditing
Support for both PostgreSQL and MySQL environments
Automated vulnerability detection for SQL injection and weak passwords
884 GitHub stars
Generation of actionable remediation scripts and fixes
Insecure configuration and permission mapping

Use Cases

Auditing a production database for configuration weaknesses before launch
Automating vulnerability scans within a CI/CD development workflow
Verifying OWASP compliance for security audits and certifications

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills database-security-scanner

For use in Claude.ai and ChatGPT

Download Skill

GitHub