Skills postgresql-development-cloudbase

📦

postgresql-development-cloudbase

Name: postgresql-development-cloudbase
Author: tencentcloudbase

v2.23.8 Content revision r1 Safe 🌐 Network access⚡ Contains scripts⚙️ External commands📁 Filesystem access

Build CloudBase PostgreSQL Apps

CloudBase PG apps need correct SDK, schema, auth, RLS, and storage setup. This skill guides agents through safe PostgreSQL workflows and verification.

Supports: Claude Codex Code(CC)

🥉 78 Bronze

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "postgresql-development-cloudbase" from https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase.md and its manifest at https://skillstore.io/api/skills/tencentcloudbase-postgresql-development-cloudbase/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/tencentcloudbase-postgresql-development-cloudbase.md Signed manifest GET /api/skills/tencentcloudbase-postgresql-development-cloudbase/manifest Signed lockfile GET /api/skills/tencentcloudbase-postgresql-development-cloudbase/lockfile

Test it

Using "postgresql-development-cloudbase". Create a CloudBase PG article manager with username login and cover image uploads.

Expected outcome:

A focused implementation plan covering PG mode checks, table setup, RLS policies, SDK CRUD, storage bucket requirements, and verification steps.

Using "postgresql-development-cloudbase". The browser can log in, but inserts fail with a permission error.

Expected outcome:

A troubleshooting path that checks table grants, sequence grants, RLS policy expressions, session user identity, and role-specific testing.

Using "postgresql-development-cloudbase". The app uses raw HTTP because app.rdb() is unavailable.

Expected outcome:

A fallback review that verifies SDK version, OpenAPI endpoint shape, auth header meaning, and whether API keys stay outside browser code.

Security Audit

Safe

v2 • 7/9/2026 Open versioned report

Static findings were reviewed in context and are scanner noise from Markdown examples, fixed reference links, and CloudBase API guidance. No executable code, prompt injection attempt, credential exfiltration intent, or covert reconnaissance behavior was found in the reviewed files.

Files scanned

871

Lines analyzed

Review items

False positives ignored

Risk Factors

🌐 Network access (15)

references/http-api.md:8 references/http-api.md:9 references/http-api.md:32 references/http-api.md:37 SKILL.md:236 SKILL.md:12 SKILL.md:13 SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:76 SKILL.md:111 SKILL.md:222

⚡ Contains scripts (1)

SKILL.md:244

⚙️ External commands (50)

📁 Filesystem access (6)

SKILL.md:26 SKILL.md:27 SKILL.md:28 SKILL.md:29 SKILL.md:30 SKILL.md:213

No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase/audits/2?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/tencentcloudbase-postgresql-development-cloudbase/security.svg)](https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/tencentcloudbase-postgresql-development-cloudbase/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/tencentcloudbase-postgresql-development-cloudbase.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

tencentcloudbase. (2026). postgresql-development-cloudbase security audit report (audit version 2) [Author version 2.23.8]. Skillstore. https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase/audits/2

BibTeX citation

@techreport{tencentcloudbase-tencentcloudbase-postgresql-development-cloudbase-2026,
  author = {tencentcloudbase},
  title = {postgresql-development-cloudbase security audit report (audit version 2)},
  institution = {Skillstore},
  year = {2026},
  number = {2},
  url = {https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase/audits/2},
  note = {Author version 2.23.8}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "postgresql-development-cloudbase security audit report (audit version 2)"
version: "2.23.8"
type: report
authors:
  - name: "tencentcloudbase"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/tencentcloudbase-postgresql-development-cloudbase/audits/2"
identifiers:
  - type: other
    value: "skillstore:tencentcloudbase-postgresql-development-cloudbase:audit:2"
    description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Implement PG-backed web CRUD

Build login, list, create, edit, and delete flows using CloudBase JS SDK v3 and app.rdb().

Design secure table access

Create tables, grants, and RLS policies that match CloudBase authenticated user sessions.

Debug CloudBase PG failures

Diagnose SDK version issues, denied RLS access, missing sequence grants, and PG storage errors.

Try These Prompts

Start a PG app

Use the CloudBase PostgreSQL skill to plan a small web CRUD feature. Confirm PG mode, auth needs, tables, and verification steps.

Add browser CRUD

Help me implement CloudBase PG browser CRUD with app.rdb(). Use auth.getSession() for login state and include build and browser checks.

Repair RLS access

Analyze my CloudBase PG RLS failure. Check GRANT, sequence access, auth.uid() policies, and whether the browser session matches row ownership.

Review production readiness

Review this CloudBase PostgreSQL app for production readiness. Check schema compatibility, RLS boundaries, storage buckets, HTTP fallback use, and verification evidence.

Best Practices

Confirm the CloudBase environment has PostgreSQL before writing PG-specific code.
Use auth.getSession() and database defaults such as auth.uid() for ownership checks.
Verify schema, grants, RLS policies, build output, browser flows, and database rows before completion.

Avoid

Using CloudBase NoSQL APIs for business data that must live in PostgreSQL.
Exposing API Key or service_role credentials in browser code.
Treating UI button hiding as authorization instead of enforcing GRANT and RLS rules.