# SQL Wildcard GRANT Privilege

> Detects SQL GRANT statements with wildcard privileges that over-privilege database users.

- Skill: `zakirkun/sql-wildcard-grant-privilege` (Agent Skill, multi-file: 2 files)
- Install (CLI): `npx skillmds@latest add zakirkun/sql-wildcard-grant-privilege`
- Raw SKILL.md: https://api.skillmd.com/api/skills/zakirkun/sql-wildcard-grant-privilege/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Data & Analytics
- Author: zakirkun (https://skillmd.com/u/zakirkun)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/zakirkun/sql-wildcard-grant-privilege

---


# SQL Wildcard GRANT Privilege

## Overview
GRANT ALL PRIVILEGES or GRANT * in SQL scripts gives a database user excessive permissions. Application database users should only have the minimum permissions required (SELECT, INSERT, UPDATE, DELETE on specific tables).

## Remediation
Follow the principle of least privilege for database users. Grant only the specific operations needed on specific tables.

**Vulnerable:**
```sql
GRANT ALL PRIVILEGES ON *.* TO 'app_user'@'%';
```

**Safe:**
```sql
GRANT SELECT, INSERT, UPDATE, DELETE ON myapp.users TO 'app_user'@'%';
```