mirror of
https://github.com/mukul975/Anthropic-Cybersecurity-Skills.git
synced 2026-06-12 14:14:56 +03:00
Production hardening: security fixes, code quality, 724 skills complete
- Fix 25 shell=True subprocess calls with list-based commands - Fix 49 verify=False in defensive skills (env-var override) - Add timeout to 231 HTTP/subprocess/socket calls - Fix 6 SQL injection patterns with whitelist validation - Replace 8 __import__() with standard imports - Remove 701 unused imports across 442 files - Add authorized-testing disclaimers to all offensive skills - Complete 11 incomplete skill directories - Expand 10 stub SKILL.md files with full content - Fix 2 YAML parse errors in frontmatter - Fix 5 pre-existing syntax errors - Convert 22 hardcoded paths/ports to environment variables - Back up 21 redundant skill pairs to .bak - Fix 2 global declaration errors - 724/724 skills with full folder anatomy (SKILL.md + agent.py + api-reference.md + LICENSE) - 0 compile errors across all 724 agent.py files
This commit is contained in:
@@ -11,9 +11,12 @@ import sqlite3
|
||||
import json
|
||||
import sys
|
||||
import os
|
||||
import re
|
||||
from datetime import datetime, timedelta
|
||||
from pathlib import Path
|
||||
|
||||
_SAFE_TABLE_RE = re.compile(r'^[a-zA-Z_][a-zA-Z0-9_]*$')
|
||||
|
||||
|
||||
class SQLiteForensicsAgent:
|
||||
"""Performs forensic analysis on SQLite database files."""
|
||||
@@ -141,7 +144,9 @@ class SQLiteForensicsAgent:
|
||||
tables = []
|
||||
for (name,) in cursor.fetchall():
|
||||
try:
|
||||
cursor.execute(f'SELECT COUNT(*) FROM "{name}"')
|
||||
if not _SAFE_TABLE_RE.match(name):
|
||||
continue
|
||||
cursor.execute(f"SELECT COUNT(*) FROM [{name}]")
|
||||
count = cursor.fetchone()[0]
|
||||
except sqlite3.OperationalError:
|
||||
count = -1
|
||||
|
||||
Reference in New Issue
Block a user