The Agent Skills Directory

[SAFE]: The skill implements industry-standard security practices for database management, including strict environment isolation (development vs. production) and migration-based workflows to ensure all changes are tracked in version control.
[SAFE]: SQL starter scripts for audit logging use security definer functions correctly by setting an empty search_path and revoking public EXECUTE permissions, which prevents privilege escalation via search path hijacking or unauthorized RPC calls.
[SAFE]: The 'Production Safety' workflow enforces a critical security guardrail where the agent is explicitly forbidden from modifying production databases without first obtaining clear, informed consent from the user.
[SAFE]: Instructions regarding credential management (e.g., service role keys) correctly warn about the risks of RLS bypass and provide best practices for environment variable separation and secret protection.

db-engineering