detection-db-query

Query local detection databases for phishing and log-analysis records.

Updated May 7, 2026
One-click install
npx skills add https://github.com/gongzeq/VAPT3 --skill detection-db-query
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: detection-db-query
Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/detection-db-query
Command: npx skills add https://github.com/gongzeq/VAPT3 --skill detection-db-query

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Retrieves phishing detection results and log-analysis data from the local detection database using read-only queries for safe reporting and auditing.

Core Features & Use Cases

  • Read-only access to detection_results and log_analysis to support incident reporting and narrative dashboards.
  • Supports multiple actions (phishing_summary, phishing_history, phishing_stats, phishing_trend, phishing_top_senders, log_latest, log_stats, db_schema, sql_query) to fetch structured data for varied reporting needs.
  • Safe and auditable: all reads only; the SQL execution is guarded with strict SELECT-only rules and timeouts to prevent accidental writes or injections.

Quick Start

Run the phishing_summary action to retrieve today's phishing counts.

Frequently Asked Questions about detection-db-query

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve phishing detection records for incident reporting?

To retrieve phishing detection records for incident reporting, use actions like phishing_summary or phishing_history to query the local detection database. These read-only operations fetch structured results from the detection_results table without risking data modification.

Can I run custom SQL queries against the log analysis database?

Yes, you can run custom SQL queries against the log analysis database using the sql_query action. The execution is strictly guarded to allow SELECT statements only, preventing accidental write operations or data injections.

What phishing statistics and trends can I pull from detection logs?

You can pull phishing statistics and trends using the phishing_stats and phishing_trend actions. These query detection_results records to return structured data on daily counts and historical patterns for dashboard reporting.

Does the detection database query tool prevent accidental data writes?

Yes, the detection database query tool prevents accidental data writes by enforcing a strict SQL guard that disallows non-SELECT statements. All database connections are also protected by a 1.5-second timeout for safe usage.

How do I view the database schema for log analysis tables?

To view the database schema for log analysis tables, use the db_schema action. It retrieves the structure of the local detection database, helping you identify available columns in detection_results and log_analysis before running targeted queries.

What is the best way to get the latest log analysis entries?

The best way to get the latest log analysis entries is the log_latest action. It queries the log_analysis table to fetch the most recent records, providing a quick snapshot of recent activity for auditing purposes.