sqltools_mcp

The server's core function is to execute arbitrary SQL queries provided by the AI client (or user) via the `execute_sql` tool. While the `SECURITY.md` outlines measures like identifier quoting for metadata queries and flagging destructive operations for AI models, direct execution of unsanitized SQL in `execute_sql` inherently carries a SQL injection risk if the AI model or user inputs malicious queries. The DM8 adapter uses string formatting with manual escaping for metadata queries, which is less robust than parameterized queries, but the escaping logic appears to handle basic identifier injection. No clear 'eval' or command injection vulnerabilities were found, and connection credentials are handled via environment variables.