Add AgentAudit security badge (safe, risk score 5/100)

[starbuck100]

AgentAudit Security Assessment

Result: ✅ Safe (risk score: 5/100)
Report: https://agentaudit.dev/skills/mysql-mcp-server

Summary

Automated security audit of mysql_mcp_server v0.2.2 found no critical or high-severity issues.

Findings (2)

#	Severity	Title
ASF-2026-0831	Medium	Unescaped table name interpolation in read_resource (line 82)
ASF-2026-0832	Low (by design)	No SQL operation allowlist on execute_sql tool

The medium finding relates to the read_resource() function where a table name from the URI is interpolated directly into SQL without identifier escaping. This is distinct from the execute_sql tool's intended behavior of executing arbitrary SQL.

Recommended fix

# Line 82 in server.py — escape the table identifier
cursor.execute(f"SELECT * FROM `{table.replace('`', '``')}` LIMIT 100")

This PR adds the AgentAudit badge to the README.

---

Automated by AgentAudit