DB Readonly

通过 scripts/db_readonly.sh 连接 MySQL 或 PostgreSQL，仅执行 SELECT/WITH/EXPLAIN 等只读查询并拦截写操作，可将结果导出为 CSV/TSV/JSON，适用于数据检查、报表与故障排查；查询写法参考 references/query-cookbook.md。

reed1898

热度 85.87

最近更新 2026-05-17 11:43:18

分类：数据依赖：代码执行 / 读写文件应用场景：数据处理 / 报告撰写

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add db-readonly

Metadata

name: db-readonly
description: Run safe read-only queries against MySQL or PostgreSQL for data inspection, reporting, and troubleshooting. Use when the user asks to read tables, inspect schema, count rows, sample data, or export query results without modifying data.

db-readonly

Use this skill for database read tasks only.

What this skill does

Connect to PostgreSQL or MySQL using connection env vars
Execute SELECT / WITH / EXPLAIN queries only
Optionally save output to CSV/TSV/JSON
Block risky SQL (INSERT, UPDATE, DELETE, DROP, ALTER, etc.)

Connection env vars

PostgreSQL

PGHOST
PGPORT (optional, default 5432)
PGDATABASE
PGUSER
PGPASSWORD

MySQL

MYSQL_HOST
MYSQL_PORT (optional, default 3306)
MYSQL_DATABASE
MYSQL_USER
MYSQL_PASSWORD

Run

Use script:

scripts/db_readonly.sh postgres "SELECT now();"
scripts/db_readonly.sh mysql "SELECT NOW();"

Export example:

scripts/db_readonly.sh postgres "SELECT * FROM users LIMIT 100" --format csv --out /tmp/users.csv

Safety rules

Refuse non-read SQL.
Prefer LIMIT for exploratory queries.
When user asks for updates/deletes/schema changes, ask explicit confirmation and do not run via this skill.
Avoid printing secrets from env vars.

Reference

Query cookbook: references/query-cookbook.md