スキル database-guardrails
📦
database-guardrails
コンテンツリビジョン r1 安全
Plan Database Changes With Explicit Approval
Database changes can damage data when scope, recovery, and permissions are unclear. This skill guides minimal schema designs and reviewed migration plans before authorized database access.
対応: Claude Codex Code(CC)
自分のエージェントでインストール
このリクエストをエージェントにコピーしてください。正規の Skill ページとマニフェストが含まれています。
エージェントリクエスト
Review the Skillstore skill "database-guardrails" from https://skillstore.io/skills/shreyam1008-database-guardrails.md and its manifest at https://skillstore.io/api/skills/shreyam1008-database-guardrails/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.エージェントは引き続き計画を提示し、セキュリティポリシーで必要な確認を求める必要があります。
エージェントが読めるリソース
AI エージェント、クローラー、スクリプトがページ全体ではなく整理されたコンテキストを必要とする場合は、これらのリンクを使ってください。
テストする
「database-guardrails」を使用しています。 Add persistence for customer delivery preferences without accessing a database.
期待される結果:
- Known facts: Live database access is not authorized; existing schema ownership remains unknown.
- Minimal proposal: Reuse the customer model if its ownership and compatibility support the required preference.
- Open questions: Which values are valid, can preferences be absent, and what retention requirements apply?
- Migration artifact: Pending repository review and clarified requirements.
- Approval needed: Specify the target, operation, and scope before any live access.
- Database actions taken: None.
「database-guardrails」を使用しています。 Review a proposal to index every column in the orders table.
期待される結果:
- Known facts: No named queries or measured performance problems were supplied.
- Minimal proposal: Do not add blanket indexes; identify actual filters, joins, ordering, and uniqueness requirements.
- Open questions: What are the expected selectivity, existing index coverage, write volume, and storage costs?
- Approval needed: Explicit permission is required before collecting live query plans.
- Database actions taken: None.
セキュリティ監査
安全v1 • 2026/10/2 バージョン別レポートを開く
The system reconnaissance flag is a false positive: SKILL.md:46 discusses uniqueness, nullability, checks, and valid state transitions. The skill requires explicit authorization before live database access and promotes reviewed migrations. No evidence found of prompt injection, credential theft, or data exfiltration in the reviewed file.
1
スキャンされたファイル
83
解析済み行数
0
レビュー項目
0
誤検知を無視
最新の完了済み静的・セマンティック監査では、確認済みのセキュリティ検出事項は見つかりませんでした。これは、スキルに副作用がないことを証明するものではありません。
監査者: codex
このレポートを共有・引用
バージョン付き評価レポート、中立的なバッジ、埋め込みカード、引用を共有できます。Skillstore は証拠を報告しますが、この Skill が安全かどうかは判断しません。
レポートリンクをコピー
https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdownバッジ
[](https://skillstore.io/skills/shreyam1008-database-guardrails?utm_source=security_passport_badge)HTMLバッジ
<a href="https://skillstore.io/skills/shreyam1008-database-guardrails?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-database-guardrails/security.svg" alt="Skillstore security assessment" loading="lazy"></a>埋め込みカード
<iframe src="https://skillstore.io/embed/skills/shreyam1008-database-guardrails.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学術引用 (APA · BibTeX · CFF)
APA形式の引用
shreyam1008. (2026). database-guardrails security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1BibTeX形式の引用
@techreport{shreyam1008-shreyam1008-database-guardrails-2026,
author = {shreyam1008},
title = {database-guardrails security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "database-guardrails security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1"
identifiers:
- type: other
value: "skillstore:shreyam1008-database-guardrails:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore スコア
このスコアの理由 証拠の信頼度: 中 55
アーキテクチャ
85
保守性
87
コンテンツ
65
コミュニティ
91
仕様準拠
作成できるもの
Design a Minimal Persistence Model
Clarify one application workflow and propose only necessary schema changes without accessing a live database.
Review a Production Migration Plan
Check authorization, recovery, locking, backfills, and disposable upgrade tests before approving migration execution.
Evaluate Proposed Indexes
Review query justification, selectivity, existing coverage, storage, and write costs before retaining an index.
これらのプロンプトを試す
Clarify a Database Request
I need persistence for [workflow]. Ask about requirements and ownership before proposing a schema. Do not connect to or query any database.
Propose a Minimal Schema
Review the repository schema for [workflow]. Propose the smallest necessary change and its integrity constraints. List open questions and avoid live database access.
Justify an Index Proposal
Review [query description] and the repository indexes. Explain candidate indexes, selectivity assumptions, duplicate coverage, and write costs. Request authorization before obtaining live query plans.
Prepare a Migration Review
Prepare a versioned migration plan for [change] using repository conventions. Cover backfills, locking, idempotency, disposable tests, recovery, and approval needed. Do not execute database actions.
ベストプラクティス
- Specify the exact database target, operation, and permitted side effects before authorizing access.
- Start with repository artifacts and one bounded workflow before expanding the schema.
- Review versioned migrations, recovery steps, and disposable fresh-install and upgrade tests before execution.
回避
- Treating a general development request as permission to inspect or mutate a live database.
- Adding speculative tables, generic data models, or indexes without concrete requirements.
- Running unreviewed SQL, changing applied migrations, or silently modifying schema during application startup.
よくある質問
Does the skill access a database automatically?
Its instructions prohibit live access unless the user explicitly authorizes the exact target, operation, and scope.
Does it enforce permissions technically?
No. It provides behavioral instructions for the agent. Database credentials and access controls still require independent configuration.
What can happen before database approval?
The agent can review repository code, schema files, migration history, documentation, and synthetic or disposable fixtures.
What if the project has no migration system?
It directs the agent to create a scoped migration artifact with dry-run, recovery, and execution instructions before any authorized run.
How does it decide whether an index is needed?
Each index needs a named query, constraint, access path, or measured problem, with selectivity and operational costs considered.
Can it guarantee a safe production migration?
No. Safety depends on project-specific review, explicit authorization, recovery readiness, and fresh-install and upgrade testing in disposable environments.
開発者情報
作成者
shreyam1008ライセンス
MIT
Skillstore リビジョン
r1
バージョンに関する注意
作者はバージョンを宣言していません。
参照
bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5
メンテナンスの新しさ
2026/10/2
利用状況
0 ダウンロード · 0 閲覧
ファイル構成
📄 SKILL.md