Agent skill · Audited from source

databases

skill · mrgoonie/claudekit-skillsLicence not declaredAudited 27 Oct 2026 · source d655ab03f566

★ 2,228pushed 207 days ago
!CAUTIONGrade B · 81/100 · 16 findings · d655ab0
2,228repo stars · whole mrgoonie/claudekit-skills

Is it safe? With care — CAUTION, grade B (81/100). We read this skill's source at commit d655ab03f566 and observed filesystem access and no hard-coded secrets. The audit raised 16 findings, 0 critical or high. What it does: Work with MongoDB (document database, BSON documents, aggregation pipelines, Atlas cloud) and PostgreSQL (relational database, SQL queries, psql CLI, pgAdmin). Use when designing database schemas, writing queries and…

Ask an AI about this pageGChatGPTCClaudePPerplexityGeGeminiXGrok
More
Cite

Cite this page

ModelsAtlas. “databases (mrgoonie/claudekit-skills)”. Retrieved 27 Oct 2026. https://modelsatlas.com/skills/mrgoonie/databases

Trust audit

Audit 0.4.1 · source read 27 Oct 2026

Trust score81/100!CAUTION B
0 critical0 high8 medium7 low1 info

CAUTION means the audit found things worth knowing before you trust this skill. Grade B is shared by 13,985 of 14,816 audited skills.

What the source does

  • FilesystemUndeclared2 observations, not in its own description
  • NetworkNone observedNo outbound calls in the source
  • ShellNone observedNo commands run in the source
  • DependenciesNot pinnedSome versions float
  • SecretsNone foundNo keys in source

Five audit layers

LayerWhat we checkResultFindings
L0 ProvenanceRepo owner, licence, archive status, activityWARN7
L1 Static sourceSecrets, path traversal, supply chain, hidden codeWARN8
L2 InstructionsPrompt injection, authority framing, hidden directivesPASS1
L3 InventoryThe files and declarations match the sourcePASS0
L4 SandboxRun in isolation and watch behaviourSKIPPED why0

Gates applied: no behavioural pass.

Findings (16)

MEDIUMInventory / provenanceinv.binary · scripts/.coverage
F-13 Inventory / provenanceCWE-1104Layer L0
.coverage
Why
a compiled or binary member cannot be reviewed from source
Fix
ship source, or explain the binary in the README
MEDIUMFilesystem / pathfs.destructive · scripts/db_backup.py:109
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
shutil.rmtree(backup_path)
Why
No further detail recorded for this rule.
Fix
—
MEDIUMFilesystem / pathfs.destructive · scripts/db_backup.py:264
F-05 Filesystem / pathCWE-22 · CWE-59Layer L1
shutil.rmtree(restore_path)
Why
No further detail recorded for this rule.
Fix
—
LOWInventory / provenanceinv.hidden_file · scripts/.coverage
F-13 Inventory / provenanceCWE-1104Layer L0
.coverage
Why
hidden member outside the usual dotfiles
Fix
review its purpose
LOWNetwork egressnet.tls_off · scripts/tests/test_db_backup.py:81
F-04 Network egressCWE-200 · CWE-319Layer L1
verify=False
Why
certificate verification is disabled
Fix
leave verification on
LOWNetwork egressnet.tls_off · scripts/tests/test_db_backup.py:103
F-04 Network egressCWE-200 · CWE-319Layer L1
verify=False
Why
certificate verification is disabled
Fix
leave verification on
LOWNetwork egressnet.tls_off · scripts/tests/test_db_backup.py:117
F-04 Network egressCWE-200 · CWE-319Layer L1
verify=False
Why
certificate verification is disabled
Fix
leave verification on
LOWNetwork egressnet.tls_off · scripts/tests/test_db_backup.py:136
F-04 Network egressCWE-200 · CWE-319Layer L1
verify=False
Why
certificate verification is disabled
Fix
leave verification on
LOWSupply chainsupply.unpinned · scripts/requirements.txt
F-08 Supply chainCWE-829 · CWE-1357Layer L1
pytest, pytest-cov, pytest-mock
Why
3 requirement(s) not pinned with ==
Fix
pin exact versions
LOWSupply chainsupply.unpinned · scripts/tests/requirements.txt
F-08 Supply chainCWE-829 · CWE-1357Layer L1
pytest, pytest-cov, pytest-mock, mongomock
Why
4 requirement(s) not pinned with ==
Fix
pin exact versions
INFOPrompt injectionprompt.authority_framing · references/mongodb-atlas.md:119
F-01 Prompt injectionCWE-94 · CWE-1427Layer L2
// - atlasAdmin: full access
Why
No further detail recorded for this rule.
Fix
—

Audit 0.4.1 · source sha d655ab03f566 · 27 Oct 2026Report an issue or request a re-scan

Provenance

Who published it, and what the verdict is pinned to

  • Publishermrgoonie GitHub userOwner of the repository this skill is read from
  • Source foldermrgoonie/claudekit-skills/.claude/skills/databasesThe exact folder we audited
  • LicenceNot declaredAs the repository states it
  • Commit pinned for this verdictd655ab03f566A new audit runs when the source changes
  • Repository statusNot archivedLast push 207 days ago
  • Sandboxed runNot runSkills are read, not executed; layer L4 is skipped

What it tells the agent

Full source on GitHub ↗

Its description: Work with MongoDB (document database, BSON documents, aggregation pipelines, Atlas cloud) and PostgreSQL (relational database, SQL queries, psql CLI, pgAdmin). Use when designing database schemas, writing queries and…

---
name: databases
description: Work with MongoDB (document database, BSON documents, aggregation pipelines, Atlas cloud) and PostgreSQL (relational database, SQL queries, psql CLI, pgAdmin). Use when designing database schemas, writing queries and aggregations, optimizing indexes for performance, performing database migrations, configuring replication and sharding, implementing backup and restore strategies, managing database users and permissions, analyzing query performance, or administering production databases.
license: MIT
---

# Databases Skill

Unified guide for working with MongoDB (document-oriented) and PostgreSQL (relational) databases. Choose the right database for your use case and master both systems.

## When to Use This Skill

Use when:
- Designing database schemas and data models
- Writing queries (SQL or MongoDB query language)
- Building aggregation pipelines or complex joins
- Optimizing indexes and query performance
- Implementing database migrations
- Setting up replication, sharding, or clustering
- Configuring backups and disaster recovery
- Managing database users and permissions
- Analyzing slow queries and performance issues
- Administering production database deployments

## Database Selection Guide

### Choose MongoDB When:
- Schema flexibility: frequent structure changes, heterogeneous data
- Document-centric: natural JSON/BSON data model
- Horizontal scaling: need to shard across multiple servers
- High write throughput: IoT, logging, real-time analytics
- Nested/hierarchical data: embedded documents preferred
- Rapid prototyping: schema evolution without migrations

**Best for:** Content management, catalogs, IoT time series, real-time analytics, mobile apps, user profiles

### Choose PostgreSQL When:
- Strong consistency: ACID transactions critical
- Complex relationships: many-to-many joins, referential integrity
- SQL requirement: team expertise, reporting tools, BI systems
- Data integrity: strict schema validation, constraints
- Mature ecosystem: extensive tooling, extensions
- Complex queries: window functions, CTEs, analytical workloads

**Best for:** Financial systems, e-commerce transactions, ERP, CRM, data warehousing, analytics

### Both Support:
- JSON/JSONB storage and querying
- Full-text search capabilities
- Geospatial queries and indexing
- Replication and high availability
- ACID transactions (MongoDB 4.0+)
- Strong security features

## Quick Start

### MongoDB Setup

```bash
# Atlas (Cloud) - Recommended
# 1. Sign up at mongodb.com/atlas
# 2. Create M0 free cluster
# 3. Get connection string

# Connection
mongodb+srv://user:[email protected]/db

# Shell
mongosh "mongodb+srv://cluster.mongodb.net/mydb"

# Basic operations
db.users.insertOne({ name: "Alice", age: 30 })
db.users.find({ age: { $gte: 18 } })
db.users.updateOne({ name: "Alice" }, { $set: { age: 31 } })
db.users.deleteOne({ name: "Alice" })
```

### PostgreSQL Setup

```bash
# Ubuntu/Debian
sudo apt-get install postgresql postgresql-contrib

# Start service
sudo systemctl start postgresql

# Connect
psql -U postgres -d mydb

# Basic operations
CREATE TABLE users (id SERIAL PRIMARY KEY, name TEXT, age INT);
INSERT INTO users (name, age) VALUES ('Alice', 30);
SELECT * FROM users WHERE age >= 18;
UPDATE users SET age = 31 WHERE name = 'Alice';
DELETE FROM users WHERE name = 'Alice';
```

## Common Operations

### Create/Insert
```javascript
// MongoDB
db.users.insertOne({ name: "Bob", email: "[email protected]" })
db.users.insertMany([{ name: "Alice" }, { name: "Charlie" }])
```

```sql
-- PostgreSQL
INSERT INTO users (name, email) VALUES ('Bob', '[email protected]');
INSERT INTO users (name, email) VALUES ('Alice', NULL), ('Charlie', NULL);
```

### Read/Query
```javascript
// MongoDB
db.users.find({ age: { $gte: 18 } })
db.users.findOne({ email: "[email protected]" })
```

```sql
-- PostgreSQL
SELECT * FROM users WHERE age >= 18;
SELECT * FROM users WHERE email = '[email protected]' LIMIT 1;
```

### Update
```javascript
// MongoDB
db.users.updateOne({ name: "Bob" }, { $set: { age: 25 } })
db.users.updateMany({ status: "pending" }, { $set: { status: "active" } })
```

```sql
-- PostgreSQL
UPDATE users SET age = 25 WHERE name = 'Bob';
UPDATE users SET status = 'active' WHERE status = 'pending';
```

### Delete
```javascript
// MongoDB
db.users.deleteOne({ name: "Bob" })
db.users.deleteMany({ status: "deleted" })
```

```sql
-- PostgreSQL
DELETE FROM users WHERE name = 'Bob';
DELETE FROM users WHERE status = 'deleted';
```

### Indexing
```javascript
// MongoDB
db.users.createIndex({ email: 1 })
db.users.createIndex({ status: 1, createdAt: -1 })
```

```sql
-- PostgreSQL
CREATE INDEX idx_users_email ON users(email);
CREATE INDEX idx_users_status_created ON users(status, created_at DESC);
```

## Reference Navigation

### MongoDB References
- **[mongodb-crud.md](references/mongodb-crud.md)** - CRUD operations, query operators, atomic updates
- **[mongodb-aggregation.md](references/mongodb-aggregation.md)** - Aggregation pipeline, stages, operators, patterns
- **[mongodb-indexing.md](references/mongodb-indexing.md)** - Index types, compound indexes, performance optimization
- **[mongodb-atlas.md](references/mongodb-atlas.md)** - Atlas cloud setup, clusters, monitoring, search

### PostgreSQL References
- **[postgresql-queries.md](references/postgresql-queries.md)** - SELECT, JOINs, subqueries, CTEs, window functions
- **[postgresql-psql-cli.md](references/postgresql-psql-cli.md)** - psql commands, meta-commands, scripting
- **[postgresql-performance.md](references/postgresql-performance.md)** - EXPLAIN, query optimization, vacuum, indexes
- **[postgresql-administration.md](references/postgresql-administration.md)** - User management, backups, replication, maintenance

## Python Utilities

Database utility scripts in `scripts/`:
- **db_migrate.py** - Generate and apply migrations for both databases
- **db_backup.py** - Backup and restore MongoDB and PostgreSQL
- **db_performance_ch

Excerpt, first 6,000 characters of SKILL.md, verbatim from the audited commit. It is text from someone else’s repository, quoted so you can judge it before your agent reads it.

Install

Pinned to the audited commit d655ab0

Download folder ↗
npm install -g mongodb-atlas-cli

Commands as the repository documents them: shown, never run by us. Our verdict covers commit d655ab03f566 only.

Works in which agents?

What its own text says, not a test

AgentStatusMore
CursorMentioned in its text, not testedSkills for Cursor · About Cursor
“Mentioned” means the skill’s text names the agent. We have not run it there.

Audit history

Every audit, every source change

  1. !CAUTION B 81 / 100

    first audit · source d655ab03f566

README badge

For maintainers · shows the latest audit

ModelsAtlas: CAUTION BMODELSATLASCAUTION · B
[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/mrgoonie/databases/badge.svg)](https://modelsatlas.com/skills/mrgoonie/databases/)

The badge shows our verdict and grade for this skill, and links back to this page. It changes when the audit does.

Similar skills

Add this badge to your README

[![ModelsAtlas: CAUTION B](https://modelsatlas.com/skills/mrgoonie/databases/badge.svg)](https://modelsatlas.com/skills/mrgoonie/databases/)

Questions about databases

What does the databases skill do?
All powerful skills of ClaudeKit.cc!
Is databases safe to install?
With care. The audit graded it B (81/100) and found 16 things worth knowing before you trust this skill, listed below with the exact line each was found on.
What can databases access on my machine?
The audit observed that it reads or writes files. At least one of those is not mentioned in its own description, which is itself a finding. Secrets in the source: none found.
Which assistants does databases work with?
Its documentation mentions cursor. That is what the text claims, not a compatibility test we ran.
How current is this page?
The grade is for one exact copy of the source (d655ab03f566), read on 2026-10-27. The repository is watched, and a new audit runs when it changes — this is the first audit.

Sources

Spotted something wrong? Report a correction · Methodology

Keep going in your AI

Opens with this page as the source. We add nothing else to the prompt.