Postgres

Use <skill-root>/scripts/postgres for application databases configured by .skills/postgres/config.toml (legacy: .skills/postgres/postgres.toml). Resolve the project and profile before connecting; verify database identity before consequential queries and whenever the target changes. Ask for a target only when configuration and the conversation leave it ambiguous.

Default remote access to read-only. Applying writes or DDL requires authorization for that operation and database; an explicit request can supply it. Preparing requested SQL and relevant verification does not require another approval. Before an unauthorized application, present the SQL and verification so the user can approve a concrete change. Local profile access guards do not replace server roles, grants, or RLS.

SQL-file layout, changelog format, migration-runner selection, and release ordering are project- or team-level decisions. Follow the consuming repository's instructions; do not infer a prerelease/changelog convention from this skill.