# Build CloudBase Web Database Workflows

CloudBase Web teams need safe NoSQL patterns for frontend data work. This skill guides CRUD, queries, pagination, realtime listeners, geolocation, and security rules.

## Install

```bash
npx skillstore add tencentcloudbase/cloudbase-document-database-web-sdk
```

## Metadata

- Status: approved
- Slug: tencentcloudbase-cloudbase-document-database-web-sdk
- Version: 2.23.8
- Author version: 2.23.8
- Skillstore revision: r1
- Version status: valid
- Tree hash: 2231285a8902a966813579abc2cd0a7a0f79da6d909c716f5be30626e2188700
- Author: tencentcloudbase
- GitHub username: tencentcloudbase
- License: MIT
- Repository: https://github.com/tencentcloudbase/skills/tree/main/skills/no-sql-web-sdk
- Ref: 24b2fe42a456262f3fd0fb3df72e12d9ed2c32ec
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/tencentcloudbase-cloudbase-document-database-web-sdk
- Manifest: https://skillstore.pages.dev/api/skills/tencentcloudbase-cloudbase-document-database-web-sdk/manifest

## Capabilities

- Routes browser-side CloudBase NoSQL work and warns when PostgreSQL or Mini Program SDK applies.
- Shows initialization with @cloudbase/js-sdk and reusable app and database instances.
- Provides examples for CRUD, complex queries, aggregation, pagination, realtime watch, and geolocation.
- Explains CloudBase NoSQL security rules, managePermissions usage, owner rules, and admin override patterns.
- Highlights result validation for create, update, delete, and permission propagation delays.
- Documents \_openid handling and query condition requirements for CloudBase rules.

## Use Cases

- Add Frontend Collection Workflows: Plan CloudBase Web SDK reads, creates, updates, deletes, and result handling for a browser app.
- Design NoSQL Access Rules: Choose simple or custom CloudBase rules for owner data, public content, and app role checks.
- Build Data Experiences: Add pagination, aggregation, realtime listeners, or geolocation patterns to product features.

## Prompt Templates

### Start a Web SDK Query

```
Use this skill to help me query a CloudBase NoSQL collection from a browser app. Confirm the auth and permission assumptions first.
```

### Add CRUD With Validation

```
Design CloudBase Web SDK CRUD for my collection. Include input validation, _openid handling, and checks for write result counts.
```

### Plan Scalable Reads

```
Review my CloudBase Web data flow and suggest pagination, indexes, field selection, aggregation, or realtime watch patterns.
```

### Review Multi-Role Security

```
Analyze my CloudBase NoSQL permissions for an app with owners, editors, and admins. Explain whether simple rules or custom rules fit.
```

## Limitations

- Does not cover CloudBase PostgreSQL, SQL tables, or app.rdb\(\).
- Does not implement server-side cloud functions or backend admin APIs.
- Assumes the developer has CloudBase project access and SDK configuration details.
- Examples require adaptation to the app schema, auth model, and collection permissions.

## Best Practices

- Confirm browser-side NoSQL and the auth model before writing SDK code.
- Check write result counts and surface permission errors to the user.
- Use pagination, indexes, and field selection for larger collections.

## Anti Patterns

- Using this skill for CloudBase PostgreSQL, SQL, backend, or Mini Program SDK tasks.
- Assuming security rules filter results instead of validating query conditions.
- Manually writing \_openid or treating resolved writes as successful writes.

## Security Audit

- Audited at: 2026-07-09T16:06:40.723\+00:00
- Summary: Most static findings are false positives from JavaScript examples, Markdown backticks, \_id or uid identifiers, and Object.keys usage. I confirmed the SKILL.md raw fallback URLs and parent-directory sibling references because they can load mutable or out-of-scope instructions at runtime. No prompt injection phrases were found in the reviewed files.

## Stats

- Views: 0
- Downloads: 4
- Favorites: 1
- Popularity score: 0