Automic Vault

brew package intelligence

sqlcmd

Automic Vault tracks sqlcmd because plain text sqlcmd context passwords matters when AI agents run command-line tools on macOS.

overview

What Automic Vault knows about sqlcmd

Microsoft SQL Server command-line interface

Homepage

Not present in the local metadata.

Commands and aliases

No executable aliases were found in the local package database.

radioisotope

Plain Text sqlcmd Context Passwords

sqlcmd stores modern CLI contexts in ~/.sqlcmd/sqlconfig. The upstream schema includes user password fields and documents macOS Keychain support as a TODO. Our isotope stores sqlconfig in the macOS keychain and injects it through a temporary HOME while `sqlcmd` runs.

Local README excerpt

sqlcmd

sqlcmd stores modern CLI contexts in ~/.sqlcmd/sqlconfig. On macOS the upstream code documents Keychain encryption as a TODO, so password fields can remain in the user config file.

This radioisotope migrates ~/.sqlcmd/sqlconfig to the keychain when it contains password fields and wraps sqlcmd so the config is recreated under a temporary home while the CLI runs.

Source: data/radioisotopes/sqlcmd/README.md

Caveats

  • Runtime changes to sqlconfig are not persisted back to keychain.
  • Direct execution of the original binary will not receive credentials.

install metadata

Resolver facts

Package keybrew:sqlcmd
Last updated2026-04-10T21:11:12Z
Pulseupdated

source trail

Generated from repository data

This page is regenerated by scripts/generate-pkg-pages.py. Deployments refuse to publish if www/pkg/ is stale relative to local package data.

Used sources

  • Nucleus package database
  • local isotope README
  • radioisotope security manifest