Skip to main content

pgagent

Enables users to run read-only SQL queries on PostgreSQL databases, ensuring safe data inspection without modifications.

Install this skill

or
75/100

Security score

The pgagent skill was audited on May 17, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.

Categories Tested

Security Issues

medium line 32

Access to hidden dotfiles in home directory

SourceSKILL.md
32`~/.pgagent/config.yml`. Ask the user which name to use if it isn't
medium line 36

Access to hidden dotfiles in home directory

SourceSKILL.md
36than `~/.pgagent/config.yml`.
medium line 71

Access to hidden dotfiles in home directory

SourceSKILL.md
718. **Don't leak secrets.** Never read or echo `~/.pgagent/config.yml`
medium line 83

Access to hidden dotfiles in home directory

SourceSKILL.md
83- `unknown db "X"` → the name isn't in `~/.pgagent/config.yml`. Tell the
medium line 85

Access to hidden dotfiles in home directory

SourceSKILL.md
85`cat ~/.pgagent/config.yml` to check, but don't read it yourself
Scanned on May 17, 2026
View Security Dashboard
Installation guide →