sysdig-sysql
SysQL query language reference for Sysdig Secure. Use when writing, debugging, or explaining SysQL graph queries against the Sysdig security datastore. Triggers on: SysQL queries, Sysdig inventory/vulnerability/posture/identity/runtime queries, "write a SysQL query", "query sysdig for", "find vulnerable images", "show me workloads", or any task involving MATCH/RETURN syntax against Sysdig entities. Also use when exploring the SysQL schema (entities, fields, relationships). Each query's entities and fields are validated against the live schema before it is shown and run, and the results are presented with follow-up suggestions.
Pinned to revision 03cadb82f5a2, so it is the text this page describes rather than whatever the author pushed since.
Pre-approved tools experimental
Experimental field. Support varies between clients, so this list is what the author declared, not what your client will enforce.
- AskUserQuestion
- Read
- Write
- mcp__secure-mcp-server__run_sysql
- mcp__secure-mcp-server__generate_sysql
- mcp__secure-mcp-server__get_sysql_entity
- mcp__secure-mcp-server__list_sysql_entities
Files
- skills/sysdig-sysql/SKILL.md
- skills/sysdig-sysql/references/agent-capabilities.md
- skills/sysdig-sysql/references/auth-preflight.md
- skills/sysdig-sysql/references/cspm_questions.md
- skills/sysdig-sysql/references/first-run-notice.md
- skills/sysdig-sysql/references/mcp-setup.md
- skills/sysdig-sysql/references/on-brand-output.md
- skills/sysdig-sysql/references/sysql_reference.md
Every link opens the file at its source, pinned to the revision this page describes.