简介
为 DBX 提供 SQL 风险评审与审批留痕。
sqlsecurityauditreview
权限
4 项权限
host.aihost.plans:readhost.schema:readhost.storage
权限代码在安装时授予,此处按 manifest 原文展示。
版本历史
- v0.4.02026年10月10日最新
First store release. A Rust sidecar rates SQL statements offline (lexical risk engine with dialect-aware statement splitting and full-width punctuation detection) and writes an immutable hash-chained audit record to SQLite; a sandboxed workbench reviews, approves or rejects it and exports the trail as CSV. Opened from a table it reads that table's real column list and the optimizer's estimated row count from the host, so the large-scan finding is the database's own answer. Three MCP tools let the built-in DBX AI self-check before proposing destructive SQL. Advisory only: DBX has no pre-execution hook, so nothing here blocks a statement from running.