Command-line tools for SQL Server schema creation, migrations, index management, performance diagnostics, backups, restores, and bulk data import/export.

This package appears to be a straightforward SQL Server CLI toolkit (migration scripts, backup/diagnostic examples) and the SQL files provided look benign. However, before installing or running anything: 1) note that the skill's metadata does not declare that sqlcmd and bcp are required even though the docs require them — ensure those tools are installed from trusted sources; 2) do not run the example commands against production databases — test in an isolated environment first; 3) avoid using the 'sa' account or putting passwords on the command line (use Windows Authentication or secure credential mechanisms) because command-line passwords can be exposed to other system users and logs; 4) verify and, if needed, change the backup path (C:\backup) to a secure location with appropriate permissions; 5) review each migration/SQL script before execution to ensure it performs only the operations you expect. The main issue is inconsistency around required tools and credential handling — fixing those (declare required binaries, recommend secure auth patterns) would reduce the security concerns.

Type: OpenClaw Skill Name: sql-server-toolkit Version: 1.0.1 The skill bundle provides standard SQL Server management capabilities and examples, including schema creation, migrations, performance diagnostics, and database backup. All commands and SQL scripts are consistent with the stated purpose of a 'SQL Server Toolkit'. There is no evidence of data exfiltration, malicious execution, persistence mechanisms, prompt injection attempts against the agent, or obfuscation. The backup command writing to a specific disk path is a standard SQL Server operation and does not indicate malicious intent within the skill itself, but rather demonstrates a legitimate function.