che-duckdb-mcp

The `db_query` tool implements a prefix-based validation to restrict query types (SELECT, WITH, SHOW, DESCRIBE, EXPLAIN, PRAGMA) and applies a default row limit (1000). While this prevents direct DDL/DML, it is not a full SQL parser and could potentially allow complex SELECT queries to be resource-intensive or exploit advanced SQL features if not handled by the underlying DuckDB driver. The `db_execute` tool is explicitly for DDL/DML and correctly marked as destructive, requiring explicit intent. Database connections are restricted to local files only, and read-only mode is supported. Documentation is downloaded from a trusted, hardcoded DuckDB URL. No hardcoded secrets or obvious malicious patterns were found in the provided source code.