About

Imported from sickn33/agentic-awesome-skills (skills/postgres-readonly-queries/SKILL.md). Install upstream with npx skills add sickn33/agentic-awesome-skills --skill postgres-readonly-queries. Copyright stays with the author (Apache-2.0).

PostgreSQL Read-Only Query Skill

Name: postgres-readonly-queries
Author: sickn33

When to Use

Use when querying PostgreSQL databases and access must stay strictly read-only
Use when exploring schemas, tables, and data across multiple configured connections
Use when you want defense-in-depth protection against accidental INSERT/UPDATE/DELETE or DDL

Execute safe, read-only queries against configured PostgreSQL databases.

Requirements

Python 3.8+
psycopg2-binary: pip install -r requirements.txt

Setup

Create connections.json in the skill directory or ~/.config/claude/postgres-connections.json.

Security: Set file permissions to 600 since it contains credentials:

chmod 600 connections.json

{
  "databases": [
    {
      "name": "production",
      "description": "Main app database - users, orders, transactions",
      "host": "db.example.com",
      "port": 5432,
      "database": "app_prod",
      "user": "readonly_user",
      "password": "your-password",
      "sslmode": "require"
    }
  ]
}

Config Fields

Field	Required	Description
name	Yes	Identifier for the database (case-insensitive)
description	Yes	What data this database contains (used for auto-selection)
host	Yes	Database hostname
port	No	Port number (default: 5432)
database	Yes	Database name
user	Yes	Username
password	Yes	Password
sslmode	No	SSL mode: disable, allow, prefer (default), require, verify-ca, verify-full

Usage

List configured databases

python3 scripts/query.py --list

Query a database

python3 scripts/query.py --db production --query "SELECT * FROM users LIMIT 10"

List tables

python3 scripts/query.py --db production --tables

Show schema

python3 scripts/query.py --db production --schema

Limit results

python3 scripts/query.py --db production --query "SELECT * FROM orders" --limit 100

Database Selection

Match user intent to database description:

User asks about	Look for description containing
users, accounts	users, accounts, customers
orders, sales	orders, transactions, sales
analytics, metrics	analytics, metrics, reports
logs, events	logs, events, audit

If unclear, run --list and ask user which database.

Safety Features

Read-only session: Connection uses PostgreSQL readonly=True mode (primary protection)
Query validation: Only SELECT, SHOW, EXPLAIN, WITH queries allowed
Single statement: Multiple statements per query rejected
SSL support: Configurable SSL mode for encrypted connections
Query timeout: 30-second statement timeout enforced
Memory protection: Max 10,000 rows per query to prevent OOM
Column width cap: 100 char max per column for readable output
Credential sanitization: Error messages don't leak passwords

Troubleshooting

Error	Solution
Config not found	Create `connections.json` in skill directory
Authentication failed	Check username/password in config
Connection timeout	Verify host/port, check firewall/VPN
SSL error	Try `"sslmode": "disable"` for local databases
Permission warning	Run `chmod 600 connections.json`

Exit Codes

0: Success
1: Error (config missing, auth failed, invalid query, database error)

Workflow

Run --list to show available databases
Match user intent to database description
Run --tables or --schema to explore structure
Execute query with appropriate LIMIT

Limitations

Read-only protections reduce accidental writes but cannot override database-server policy, triggers, extensions, or an over-privileged account. Use a database role with read-only permissions as the primary control.
Query results can contain personal, confidential, or regulated data. Confirm the intended database and avoid exporting or sharing results without explicit authorization.
The script is not a replacement for backups, auditing, access reviews, or production change controls.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/sickn33-agentic-awesome-skills-postgres-readonly-queries/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

sickn33-agentic-awesome-skills-postgres-readonly-queries.ocm.jsonjson

{
  "ocm": "1",
  "id": "sickn33-agentic-awesome-skills-postgres-readonly-queries",
  "kind": "skill",
  "name": "postgres-readonly-queries",
  "description": "Execute safe read-only SQL queries against PostgreSQL databases with multi-connection support and defense-in-depth write protection.",
  "publisher": "sickn33",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "coding",
      "data_analysis"
    ],
    "tags": [
      "skill-md",
      "postgres",
      "sql",
      "database",
      "read-only",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Execute safe read-only SQL queries against PostgreSQL databases with multi-connection support and defense-in-depth write protection."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/sickn33/agentic-awesome-skills",
      "path": "skills/postgres-readonly-queries/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/sickn33/agentic-awesome-skills/blob/HEAD/skills/postgres-readonly-queries/SKILL.md",
      "key": "sickn33/agentic-awesome-skills/skills/postgres-readonly-queries/SKILL.md"
    },
    "license": "Apache-2.0"
  },
  "instructions": "# PostgreSQL Read-Only Query Skill\n\n## When to Use\n\n- Use when querying PostgreSQL databases and access must stay strictly read-only\n- Use when exploring schemas, tables, and data across multiple configured connections\n- Use when you want defense-in-depth protection against accidental INSERT/UPDATE/DELETE or DDL\n\nExecute safe, read-only queries against configured PostgreSQL databases.\n\n## Requirements\n\n- Python 3.8+\n- psycopg2-binary: `pip install -r requirements.txt`\n\n## Setup\n\nCreate `connections.json` in the skill directory or `~/.config/claude/postgres-connections.json`.\n\n**Security**: Set",
  "cost": {
    "context_tokens": 1048
  }
}

Fetch it by URL: GET /api/v1/registry/sickn33-agentic-awesome-skills-postgres-readonly-queries/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.