Skip to content

fix(analyzers): classify SQL tools separately from file-access tools (#165)#251

Merged
hello-args merged 3 commits into
mainfrom
fix/165-sql-file-tool-classifier
Jun 11, 2026
Merged

fix(analyzers): classify SQL tools separately from file-access tools (#165)#251
hello-args merged 3 commits into
mainfrom
fix/165-sql-file-tool-classifier

Conversation

@hello-args

Copy link
Copy Markdown
Collaborator

Summary

  • Add shared tool_classification module used by tool_abuse and path_validation
  • Stop flagging SQL tools such as read_query for path traversal when schema/name indicate database access
  • Keep HIGH findings for genuine file-access tools with path parameters

Test plan

  • pytest tests/test_tool_classification.py
  • read_query with SQL schema → no tool_abuse/path_validation findings
  • read_file with path schema → still flagged

Made with Cursor

…165)

Shared tool_classification module prevents read_query and similar database
tools from triggering path traversal findings in tool_abuse and path_validation.
@hello-args hello-args merged commit 6074481 into main Jun 11, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant