sqlite3-mcp-server

The `execute_sql` tool allows the LLM to run arbitrary SQL queries, posing a significant risk if the LLM generates malicious or destructive commands (e.g., `DROP TABLE`). While the CRUD tools use parameterized queries for data values, the `sql` string itself is directly from the LLM, requiring careful LLM prompting. The `describe_table` function uses an f-string for the table name in a `PRAGMA` statement, which could be a minor SQL injection risk if not strictly validated. Additionally, the `get_db_path` function might be susceptible to path traversal if `db_name` is manipulated to include `../` sequences, potentially allowing access to files outside the intended `databases` directory.