postgres-tool

PostgreSQL database management tool for querying databases, exporting results, inspecting schemas, and safely performing UPDATE/DELETE operations with automa...

This skill appears to do what it claims, but review the following before installing: 1) Remove or replace the bundled config/db_config.json — do not leave plaintext credentials in the package or deploy it as-is to production. 2) Be aware the scripts auto-load db_config.json from your current working directory first — ensure no sensitive db_config.json exists in any directories where the agent may run. 3) Inspect scripts/postgres_tool.py to confirm backup locations and restore behavior meet your policies (it writes backups under the skill directory). 4) Only install dependencies from trusted sources (the repo expects local wheel files or pip installs). 5) Run the skill in an isolated/test environment first and confirm interactive confirmation behavior (input prompts) or adjust automation flags (like --force) carefully. If you want a higher assurance, ask the author to remove default credentials and require explicit config or environment variables for DB access.

Type: OpenClaw Skill Name: postgres-tool Version: 1.0.0 The postgres-tool skill bundle is a legitimate database management utility designed for PostgreSQL operations, including querying, schema inspection, and data modification. The primary script, scripts/postgres_tool.py, implements robust safety features such as automatic CSV backups before UPDATE/DELETE operations and mandatory user confirmation. The bundle includes extensive documentation for safe usage (SAFETY_GUIDE.md) and offline deployment (OFFLINE_DEPLOYMENT_GUIDE.md), and its diagnostic tool (scripts/diagnose_deps.py) only performs standard environment checks. No evidence of data exfiltration, malicious execution, or prompt injection was found.