跳到主要内容
知仓学习社ZHICANG

db

Oracle Database guidance for SQL, PL/SQL, SQLcl, ORDS, Oracle Vector SDK, administration, app development, performance, security, migrations, and ag…

执行命令读凭据写文件联网严重 16 · 高危 3oracle/skills

它会碰到什么

扫了多少171 个文本文件,2521 KB
它会碰到什么执行命令读凭据写文件联网
命中总数40 处
命中统计严重 16 · 高 3 · 中 0 · 低 0
逐条看命中(19 条严重或高危)
  • 严重 backup-recovery/cloud-protect.md:100persistence
    systemctl enable sql-scheduler
  • 严重 migrations/migrate-postgres-to-oracle.md:559cred-paths
    - [AWS Schema Conversion Tool User Guide](https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_Welcome.html)
  • 严重 migrations/migrate-sqlserver-to-oracle.md:553cred-paths
    - [AWS Schema Conversion Tool — SQL Server to Oracle](https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_Source.SQLServer.html)
  • 严重 migrations/migrate-sybase-to-oracle.md:604cred-paths
    - [AWS Schema Conversion Tool User Guide — SAP ASE to Oracle](https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_Welcome.html)
  • 严重 migrations/migration-assessment.md:498cred-paths
    - [AWS Schema Conversion Tool — Assessment Reports](https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_AssessmentReport.html)
  • 严重 migrations/oracle-migration-tools.md:400cred-paths
    - [AWS Schema Conversion Tool User Guide](https://docs.aws.amazon.com/SchemaConversionTool/latest/userguide/CHAP_Welcome.html)
  • 严重 ords/ords-installation.md:65persistence
    echo 'export PATH=$PATH:/opt/oracle/ords/bin' >> ~/.bashrc
  • 严重 ords/ords-installation.md:364persistence
    systemctl enable ords
  • 严重 ords/ords-sample-app.md:35cred-paths
    | `oci-iam-target` | Configuring Oracle IAM / OCI IAM as the target OIDC identity provider. | IAM app settings, `.env` values, Remix auth edits, and OIDC valida
  • 严重 ords/ords-sample-app.md:75cred-paths
    Relevant files may include `.env.example`, Remix auth files, Remix route files, constants, profile model files, `ords_config_service/apispec.json`, and `ords_co
  • 严重 ords/ords-sample-app.md:205cred-paths
    ## Required `.env` Values for OCS and Database Bootstrap
  • 严重 ords/ords-sample-app.md:592cred-paths
    ## Required `.env` Values for Oracle IAM Mode
  • 严重 ords/ords-sample-app.md:694cred-paths
    Then update `.env`:
  • 严重 ords/ords-sample-app.md:951cred-paths
    - `.env` changes are followed by schema/data refresh when needed.
  • 严重 ords/ords-sample-app.md:953cred-paths
    Refresh schema and data after relevant `.env` changes:
  • 严重 sqlcl/sqlcl-scheduler-daemon.md:269persistence
    systemctl enable sql-scheduler
  • sqlcl/sqlcl-mcp-server.md:117identity-config-write
    Edit `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\Claude\claude_desktop_config.json` (Windows):
  • sqlcl/sqlcl-mcp-server.md:117identity-config-write
    Edit `~/Library/Application Support/Claude/claude_desktop_config.json` (macOS) or `%APPDATA%\Claude\claude_desktop_config.json` (Windows):
  • sqlcl/sqlcl-mcp-server.md:162identity-config-write
    Or manually create/edit `.mcp.json` in your project directory:

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Oracle Database Skills

This domain contains Oracle Database skills for administration, SQL and PL/SQL development, performance tuning, security, ORDS, SQLcl, migrations, frameworks, VecDB SDK/REST/PL/SQL workflows, OCR container guidance, and agent-safe database workflows.

How to Use This Domain

  1. Start with the routing table below.
  2. Read only the specific file or category you need.

Directory Structure

db/
├── admin/
├── agent/
├── appdev/
├── architecture/
├── backup-recovery/
├── containers/
├── design/
├── devops/
├── features/
├── frameworks/
├── migrations/
├── monitoring/
├── ords/
├── performance/
├── plsql/
├── security/
├── sql-dev/
├── sqlcl/
└── vecdb/

Category Routing

| Topic | Directory |

|-------|-----------|

| Data Guard, redo/undo logs, users | db/admin/ |

| Safe DML, destructive operation guards, idempotency, schema discovery, ORA- error handling | db/agent/ |

| JDBC, Python, .NET, pooling, JSON, XML, spatial, Oracle Text, transactions, MLE, language drivers | db/appdev/ |

| RAC, Multitenant, Exadata, In-Memory, OCI database services, Data Guard architecture | db/architecture/ |

| Backup, recovery, RMAN, Autonomous Recovery Service, Cloud Protect | db/backup-recovery/ |

| OCR database-category container images and pull guidance | db/containers/ |

| ERD, data modeling, partitioning, tablespaces | db/design/ |

| Schema migrations, online operations, edition-based redefinition, testing, version control | db/devops/ |

| AQ, DBMS_SCHEDULER, materialized views, DBLinks, APEX, vector search, SELECT AI | db/features/ |

| SQLAlchemy, Django, Pandas, Spring JPA, MyBatis, TypeORM, Sequelize, Dapper, GORM | db/frameworks/ |

| Migrations from PostgreSQL, MySQL, SQL Server, MongoDB, Snowflake, and more | db/migrations/ |

| Alert log, ADR, health monitor, space management, top SQL | db/monitoring/ |

| ORDS architecture, installation, REST design, authentication, monitoring, ORDS Concert Sample App | db/ords/ |

| AWR, ASH, explain plan, indexes, optimizer stats, wait events, memory | db/performance/ |

| Package design, error handling, performance, collections, cursors, debugging | db/plsql/ |

| Privileges, Deep Data Security, VPD, masking, auditing, encryption, network security | db/security/ |

| SQL tuning, SQL patterns, dynamic SQL, injection avoidance | db/sql-dev/ |

| SQLcl basics, scripting, Liquibase, formatting, DDL generation, data loading, MCP server, scheduler daemon, AWR, background jobs, schema comparison with DIFF | db/sqlcl/ |

| Oracle Vector SDK setup and configuration, including database preparation, Python SDK, REST API, PL/SQL package, version prerequisites, vector tables, ingestion, models, search, reranking, indexes, and jobs | db/vecdb/ |

Key Starting Points

  • db/sqlcl/sqlcl-mcp-server.md
  • db/migrations/migration-assessment.md
  • db/performance/explain-plan.md
  • db/plsql/plsql-package-design.md
  • db/appdev/java-oracle-jdbc.md
  • db/devops/schema-migrations.md
  • db/security/deep-data-security.md
  • db/agent/schema-discovery.md
  • db/containers/container-selection-matrix.md
  • db/backup-recovery/autonomous-recovery-service.md
  • db/backup-recovery/cloud-protect.md
  • db/vecdb/vecdb-provisioning.md
  • db/vecdb/vecdb-architecture.md

Common Multi-Step Flows

| Task | Recommended Sequence |

|------|----------------------|

| Diagnose a slow query | explain-planwait-eventsoptimizer-statsawr-reports |

| Plan a migration | migration-assessmentoracle-migration-tools → source-specific migrate-*.mdmigration-cutover-strategy |

| Build RAG on Oracle Database | ai-profilesvector-searchdbms-vector |

| Build a Java JDBC service | java-oracle-jdbcjava-oracle-jdbc/dependenciesjava-oracle-jdbc/connectionsjava-oracle-jdbc/sqljava-oracle-jdbc/pooling-production |

| Perform agent-safe schema change | schema-discoverydestructive-op-guardsidempotency-patternsschema-migrations |

| Set up AI-driven database access via MCP | security/deep-data-security (end-user authorization) → sqlcl-basics (save connections) → sqlcl-mcp-server (configure + start) |

| Set up an Oracle Vector SDK database deployment | vecdb-provisioning → Oracle Vector SDK Quick Start → Prepare an AI Database |

| Build vector-based applications for semantic search, RAG, or recommendations using Oracle Vector SDK's fixed-schema APIs through the Python SDK, REST, or PL/SQL | vecdb-architecturevecdb-api-reference → relevant capability file (vecdb-models, vecdb-vector-tables, vecdb-search, or vecdb-indexes) |

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。