database-lookup
What this skill does
Query documented public database APIs with explicit endpoints, filters, pagination, and provenance. Use when a scientific, regulatory, financial, or other database-backed fact must be retrieved reprod
github/k-dense-ai - Data Exfiltration - 33.1k stars
Threat analysis
Skill info
pkg:github/K-Dense-AI/scientific-agent-skills@3956e54?skill=database-lookupAssessments (4)
Data Exfiltration
Data Exfiltration via local-llm-review
references/cbioportal.md
The cBioPortal API allows for fetching data with parameters like `projection`, `pageSize`, and `sortBy`. While no authentication is required for the public instance, private instances require a data aData Exfiltration via local-llm-review
references/bls.md
The BLS API requires an API key for v2 features, which are more powerful. If the skill is used in a context where the API key is not properly managed, it could lead to unauthorized data access.Data Exfiltration via local-llm-review
references/ena.md
The ENA Portal API allows for searching records with a query syntax. If the skill is used to search for sensitive data without proper filtering, it could lead to data exfiltration.Data Exfiltration via local-llm-review
references/epa.md
The EPA Envirofacts API allows for querying data with a RESTful URL-based query pattern. If the skill is used to query sensitive data without proper filtering, it could lead to data exfiltration.Badge
Add the Anomity scan badge for database-lookup to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of database-lookup? Report an issue or request a rescan.
