Hook community beginner
Destructive SQL Guard
Intercept DROP / TRUNCATE / DELETE-without-WHERE before an agent executes it.
At a glance
| What | Intercept DROP / TRUNCATE / DELETE-without-WHERE before an agent executes it. |
|---|---|
| Where | Security |
Purpose
Intercept DROP / TRUNCATE / DELETE-without-WHERE before an agent executes it.
Security scan
Last sweep 2026-10-24: 0 finding(s), 0 marked as examples.
Implementation
Matches the SQL string passed to a database/MCP tool. Destructive statements are denied by default; a DELETE/UPDATE without a WHERE clause is always denied. Statements on a non-production target can be allowed with a `--allow-destructive` flag that requires a human confirmation token.
Registry stats
| Verification | community · Sep 29, 2026 |
|---|---|
| Completeness | 74 |
| Trust multiplier | ×1.25 |
| Composite | 33.6 · adequate |
| Freshness | 25 days since last source check |
| Difficulty | beginner |
| Version | 0.3.0 |
| License | Apache-2.0 |
| Security flags | none |
Example
`DROP TABLE prod.orders` from an agent is denied and surfaced for confirmation.
Did this solve your problem?
Destructive SQL Guard