技能 database-guardrails
📦
database-guardrails
内容修订 r1 安全
Plan Database Changes With Explicit Approval
Database changes can damage data when scope, recovery, and permissions are unclear. This skill guides minimal schema designs and reviewed migration plans before authorized database access.
支持: Claude Codex Code(CC)
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "database-guardrails" from https://skillstore.io/skills/shreyam1008-database-guardrails.md and its manifest at https://skillstore.io/api/skills/shreyam1008-database-guardrails/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“database-guardrails”。 Add persistence for customer delivery preferences without accessing a database.
预期结果:
- Known facts: Live database access is not authorized; existing schema ownership remains unknown.
- Minimal proposal: Reuse the customer model if its ownership and compatibility support the required preference.
- Open questions: Which values are valid, can preferences be absent, and what retention requirements apply?
- Migration artifact: Pending repository review and clarified requirements.
- Approval needed: Specify the target, operation, and scope before any live access.
- Database actions taken: None.
正在使用“database-guardrails”。 Review a proposal to index every column in the orders table.
预期结果:
- Known facts: No named queries or measured performance problems were supplied.
- Minimal proposal: Do not add blanket indexes; identify actual filters, joins, ordering, and uniqueness requirements.
- Open questions: What are the expected selectivity, existing index coverage, write volume, and storage costs?
- Approval needed: Explicit permission is required before collecting live query plans.
- Database actions taken: None.
安全审计
安全v1 • 2026/10/2 打开版本化报告
The system reconnaissance flag is a false positive: SKILL.md:46 discusses uniqueness, nullability, checks, and valid state transitions. The skill requires explicit authorization before live database access and promotes reviewed migrations. No evidence found of prompt injection, credential theft, or data exfiltration in the reviewed file.
1
已扫描文件
83
分析行数
0
复核项
0
已忽略误报
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/shreyam1008-database-guardrails?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/shreyam1008-database-guardrails?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/shreyam1008-database-guardrails/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/shreyam1008-database-guardrails.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
shreyam1008. (2026). database-guardrails security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1BibTeX 引用
@techreport{shreyam1008-shreyam1008-database-guardrails-2026,
author = {shreyam1008},
title = {database-guardrails security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "database-guardrails security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "shreyam1008"
date-released: "2026-10-02"
url: "https://skillstore.io/skills/shreyam1008-database-guardrails/audits/1"
identifiers:
- type: other
value: "skillstore:shreyam1008-database-guardrails:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
65
社区
91
规范符合性
你能构建什么
Design a Minimal Persistence Model
Clarify one application workflow and propose only necessary schema changes without accessing a live database.
Review a Production Migration Plan
Check authorization, recovery, locking, backfills, and disposable upgrade tests before approving migration execution.
Evaluate Proposed Indexes
Review query justification, selectivity, existing coverage, storage, and write costs before retaining an index.
试试这些提示
Clarify a Database Request
I need persistence for [workflow]. Ask about requirements and ownership before proposing a schema. Do not connect to or query any database.
Propose a Minimal Schema
Review the repository schema for [workflow]. Propose the smallest necessary change and its integrity constraints. List open questions and avoid live database access.
Justify an Index Proposal
Review [query description] and the repository indexes. Explain candidate indexes, selectivity assumptions, duplicate coverage, and write costs. Request authorization before obtaining live query plans.
Prepare a Migration Review
Prepare a versioned migration plan for [change] using repository conventions. Cover backfills, locking, idempotency, disposable tests, recovery, and approval needed. Do not execute database actions.
最佳实践
- Specify the exact database target, operation, and permitted side effects before authorizing access.
- Start with repository artifacts and one bounded workflow before expanding the schema.
- Review versioned migrations, recovery steps, and disposable fresh-install and upgrade tests before execution.
避免
- Treating a general development request as permission to inspect or mutate a live database.
- Adding speculative tables, generic data models, or indexes without concrete requirements.
- Running unreviewed SQL, changing applied migrations, or silently modifying schema during application startup.
常见问题
Does the skill access a database automatically?
Its instructions prohibit live access unless the user explicitly authorizes the exact target, operation, and scope.
Does it enforce permissions technically?
No. It provides behavioral instructions for the agent. Database credentials and access controls still require independent configuration.
What can happen before database approval?
The agent can review repository code, schema files, migration history, documentation, and synthetic or disposable fixtures.
What if the project has no migration system?
It directs the agent to create a scoped migration artifact with dry-run, recovery, and execution instructions before any authorized run.
How does it decide whether an index is needed?
Each index needs a named query, constraint, access path, or measured problem, with selectivity and operational costs considered.
Can it guarantee a safe production migration?
No. Safety depends on project-specific review, explicit authorization, recovery readiness, and fresh-install and upgrade testing in disposable environments.
开发者详情
作者
shreyam1008许可证
MIT
Skillstore 修订
r1
版本提示
作者未声明版本。
引用
bbec03cf10354f3aaccd6dd24eda4ac9ceeceac5
维护新鲜度
2026/10/2
使用量
0 次下载 · 0 次浏览
文件结构
📄 SKILL.md