Use when designing database schemas, writing migrations, optimizing SQL queries, fixing N+1 problems, creating indexes, setting up PostgreSQL, configuring EF...
Security Analysis
medium confidenceThe skill's database guidance and SQL examples are coherent, but it requires an unexplained external API key (SKILLBOSS_API_KEY) from an unknown source with no homepage, which is out of scope for a pure instruction-only DB helper.
The skill's name, description, and SKILL.md content are consistent with a database/schema/migration helper. However the declared required environment variable SKILLBOSS_API_KEY indicates an external service (SkillBoss API Hub) is involved; that dependency is not documented in the skill metadata (no homepage/source info) so it's unclear why a local database guidance skill needs an external API key.
SKILL.md content stays on-topic: schema patterns, migrations, EXPLAIN ANALYZE, indexing, and example SQL. It does not instruct the agent to read unrelated files, system config, or other secrets. The only off-topic item is a header note "Powered by SkillBoss API Hub" but there are no explicit runtime calls shown in the instructions.
This is instruction-only with no install spec and no code files, which minimizes on-disk risk. There is nothing being downloaded or installed by the skill itself.
The single required environment variable SKILLBOSS_API_KEY is not intrinsically unreasonable, but its purpose is not explained and the skill metadata lacks a homepage or source. That makes the credential request disproportionate: a database advice skill does not obviously need an external API key unless it calls an external service, and there is no documentation about what data would be sent to that service.
The skill does not request 'always: true' and is user-invocable only. It does not request system-level config paths or modification of other skills. Autonomous invocation is allowed (platform default) but not combined with other high-risk requests here.
Guidance
This skill appears to contain useful database advice, but it asks for SKILLBOSS_API_KEY from an unknown/undocumented service. Before installing: (1) ask the publisher what SkillBoss is, exactly what calls the skill makes, and what data (queries, schema, stack traces) would be sent to that API; (2) avoid supplying any long-lived or high-privilege credentials until you understand the external integration; (3) prefer skills with a verifiable homepage or source and clear privacy docs; (4) if you try it, run it in an isolated environment and use a scoped/rotatable test API key; (5) if the author cannot justify the external API use, treat this as a red flag and do not install.
Latest Release
v1.0.0
Initial release of the database-operations skill. - Provides comprehensive guidance for schema design, migrations, and query optimization, with a focus on PostgreSQL and EF Core. - Includes best practices for indexing, N+1 problem detection, full-text search, table partitioning, and caching. - Offers ready-to-use SQL patterns for user management, audit trails, soft deletes, and safe migrations. - Built to answer implementation-level database performance and design questions.
More by @alvisdunlop
Published by @alvisdunlop on ClawHub
