detection-db-query

Query local detection databases for phishing and log-analysis records.

Updated May 7, 2026
One-click install
npx skills add https://github.com/gongzeq/VAPT3 --skill detection-db-query
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: detection-db-query
Source: https://github.com/gongzeq/VAPT3/tree/main/secbot/skills/detection-db-query
Command: npx skills add https://github.com/gongzeq/VAPT3 --skill detection-db-query

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Retrieves phishing detection results and log-analysis data from the local detection database using read-only queries for safe reporting and auditing.

Core Features & Use Cases

  • Read-only access to detection_results and log_analysis to support incident reporting and narrative dashboards.
  • Supports multiple actions (phishing_summary, phishing_history, phishing_stats, phishing_trend, phishing_top_senders, log_latest, log_stats, db_schema, sql_query) to fetch structured data for varied reporting needs.
  • Safe and auditable: all reads only; the SQL execution is guarded with strict SELECT-only rules and timeouts to prevent accidental writes or injections.

Quick Start

Run the phishing_summary action to retrieve today's phishing counts.

Frequently Asked Questions about detection-db-query

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve phishing detection records for incident reporting?▼

To retrieve phishing detection records for incident reporting, use actions like phishing_summary or phishing_history to query the local detection database. These read-only operations fetch structured results from the detection_results table without risking data modification.

Can I run custom SQL queries against the log analysis database?▼

Yes, you can run custom SQL queries against the log analysis database using the sql_query action. The execution is strictly guarded to allow SELECT statements only, preventing accidental write operations or data injections.

What phishing statistics and trends can I pull from detection logs?▼

You can pull phishing statistics and trends using the phishing_stats and phishing_trend actions. These query detection_results records to return structured data on daily counts and historical patterns for dashboard reporting.

Does the detection database query tool prevent accidental data writes?▼

Yes, the detection database query tool prevents accidental data writes by enforcing a strict SQL guard that disallows non-SELECT statements. All database connections are also protected by a 1.5-second timeout for safe usage.

How do I view the database schema for log analysis tables?▼

To view the database schema for log analysis tables, use the db_schema action. It retrieves the structure of the local detection database, helping you identify available columns in detection_results and log_analysis before running targeted queries.

What is the best way to get the latest log analysis entries?▼

The best way to get the latest log analysis entries is the log_latest action. It queries the log_analysis table to fetch the most recent records, providing a quick snapshot of recent activity for auditing purposes.