pgagent
Enables users to run read-only SQL queries on PostgreSQL databases, ensuring safe data inspection without modifications.
Install this skill
or
75/100
Security score
The pgagent skill was audited on May 17, 2026 and we found 5 security issues across 1 threat category. Review the findings below before installing.
Categories Tested
Security Issues
medium line 32
Access to hidden dotfiles in home directory
SourceSKILL.md
| 32 | `~/.pgagent/config.yml`. Ask the user which name to use if it isn't |
medium line 36
Access to hidden dotfiles in home directory
SourceSKILL.md
| 36 | than `~/.pgagent/config.yml`. |
medium line 71
Access to hidden dotfiles in home directory
SourceSKILL.md
| 71 | 8. **Don't leak secrets.** Never read or echo `~/.pgagent/config.yml` |
medium line 83
Access to hidden dotfiles in home directory
SourceSKILL.md
| 83 | - `unknown db "X"` → the name isn't in `~/.pgagent/config.yml`. Tell the |
medium line 85
Access to hidden dotfiles in home directory
SourceSKILL.md
| 85 | `cat ~/.pgagent/config.yml` to check, but don't read it yourself |
Scanned on May 17, 2026
View Security DashboardRate this skill
Categorydata analytics
UpdatedJune 15, 2026
openclawdatabasedata-analystbackend-developerdatabase-administratorpostgresqldata analyticsdevelopment
Johnny1110/pgagent