sqlite_mcp

The tool uses parameterized queries, which mitigates standard SQL injection risks. Embedding generation occurs locally, eliminating external API data leakage. The `TOOL_UNLOCK_TOKEN` is dynamically generated to ensure documentation awareness. However, the use of `conn.enable_load_extension(True)` for `sqlite-vec` (though disabled immediately after) could be a theoretical vector if a malicious extension were to be loaded, but in this context, it loads a known, required extension. The handling of multiple SQL statements by splitting on semicolons without full SQL parsing could potentially introduce complex injection scenarios if an attacker could control the input SQL, though parameterized queries reduce this risk for data values.