[DarkCrusader2]

Since this unconditionally run the queries returned by a LLM, any safeguards against LLM issuing DELETE commands.

[dagw]

If you look at the source, you'll see that it opens the DB in read-only mode.

[DarkCrusader2]

Yes you are right. Source ref for anyone interested - https://github.com/simonw/sqlite-utils-ask/blob/91277eeb26bd...

[jillesvangurp]

There are also some SQL parsing libraries for python that you can use to restrict things further. But opening the DB in RO mode is a good start.

Another concern with tools like this is query performance and not accidentally overloading your database with some stupidly expensive query.