create-readonly-db-role
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides SQL templates and workflows for provisioning a read-only database role. It avoids hardcoding any sensitive credentials, using placeholders like 'REPLACE_ME' for passwords.
- [SAFE]: It recommends storing database connection strings in environment variables within shell profiles (e.g., ~/.zshrc) as a standard practice for local development environment configuration.
- [SAFE]: The instructions emphasize the principle of least privilege by creating a role with SELECT-only permissions and providing a denylist mechanism to explicitly revoke access to sensitive tables containing API keys or PII.
Audit Metadata