domains / families / devops / create-readonly-db-role

create-readonly-db-role

separate

Set up read-only PostgreSQL access for agents. Use only when the user explicitly invokes /create-readonly-db-role.

When to use

• Create read-only PostgreSQL role
• Configure SELECT-only grants
• Set up denylist for secrets and PII
• Apply soft guardrails like read-only transactions
• Wire protected database connection
• Verify read-only access and permissions

When not to use

• Production DDL execution by agents
• Granting write permissions
• Granting access to auth schema
• Committing connection secrets to repository

Skill page

Source