db-connector

Étoiles10

Forks0

Mis à jour11 mai 2026 à 17:02

Use when the user asks about reading data from a database — SELECT queries, schema introspection, "show me the rows/tables/columns…". Supports PostgreSQL, MySQL, SQLite, SQL Server, MongoDB, DynamoDB, and Oracle via pluggable drivers. Every statement passes the policy gate BEFORE any driver loads or any connection opens: write statements escalate, delete and admin statements return formatted SQL without executing, privilege statements are hard-denied.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Source

narailabs

narailabs/narai-primitives

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Métiers associésSOC

Basé sur la classification professionnelle SOC

Architectes de bases de donnéesProfessions informatiques et mathématiques·SOC 15-1243

SKILL.md

readonly

Plus depuis ce dépôt

même dépôt

confluence-connector

narailabs/narai-primitives

Use when the user asks about Confluence content or wants to create, update, or delete Confluence pages and comments — CQL search, page retrieval, space metadata, comments, attachments, or any write operation on pages. Supports both read and write surfaces; every action passes the policy gate before any network call is made: read actions succeed by default, write and delete actions escalate by default, privilege actions are hard-denied.

2026-07-0310

jira-connector

narailabs/narai-primitives

Use when the user asks about Jira data or wants to create, update, or delete Jira content — JQL search, issue details, project metadata, comments, attachments, status transitions, or any write operation on issues and comments. Supports both read and write surfaces; every action passes the policy gate before any network call is made: read actions succeed by default, write and delete actions escalate by default, privilege actions are hard-denied.

2026-07-0310

gcp-connector

narailabs/narai-primitives

Use when the user asks about read-only GCP inventory — Cloud Run services, Cloud SQL instances, Pub/Sub topics, or Cloud Logging entries. Queries are scoped to a single GCP project. Never modifies GCP resources.

2026-07-0310

gitlab-connector

narailabs/narai-primitives

Use when the user asks about GitLab data or wants to act on GitLab — project info, code search, issue/MR/release/pipeline inspection, or any write that creates, updates, closes, or deletes an MR, issue, note, or release; merging MRs (admin); and managing CI pipeline runs (retry / cancel / trigger / play_job).

2026-05-1210

create-connector

narailabs/narai-primitives

Use this skill whenever the user wants to add a new agent connector to their @narai connectors workspace — wrapping a SaaS API, REST endpoint, GraphQL endpoint, SDK, or CLI tool into the canonical @narai connector shape (CLI + library + Claude Code plugin). Trigger even if the user doesn't say "connector" explicitly: phrases like "I want to query Stripe from Claude", "add Slack to our agents", "wrap our internal orders API", "connect Salesforce", "I have a GraphQL endpoint we need exposed", "make a Linear agent" all warrant this skill. Walks the user through identity, auth, and action-surface questions, then scaffolds the package, plugin layer, and tests by stamping out canonical templates and generating per-connector code. Do NOT use for: modifying existing connectors (just edit the file), wrapping MCP servers (different abstraction), or querying databases (db-agent-connector already covers postgres/mysql/sqlite/mssql/mongodb/dynamodb/oracle).

2026-05-1110

aws-connector

narailabs/narai-primitives

Use when the user asks about read-only AWS inventory — Lambda functions, RDS databases, S3 buckets, or CloudWatch metrics in an AWS account. Queries are scoped to a single region (except list_buckets, which is account-wide). Never modifies AWS resources.

2026-05-1110

name	db-connector
description	Use when the user asks about reading data from a database — SELECT queries, schema introspection, "show me the rows/tables/columns…". Supports PostgreSQL, MySQL, SQLite, SQL Server, MongoDB, DynamoDB, and Oracle via pluggable drivers. Every statement passes the policy gate BEFORE any driver loads or any connection opens: write statements escalate, delete and admin statements return formatted SQL without executing, privilege statements are hard-denied.
context	fork

Database Connector

Answer the user's question by invoking the db-connector binary exposed by this plugin. It delegates to narai-primitives/db, which enforces the policy gate before any backend is touched.

Invocation

db-connector --action <action> --params '<json>'

Return the connector's JSON envelope verbatim.

Supported actions

Action	Required params	Optional params
`query`	`env` + `sql` (or `sqlite_path` + `sql`)	`max_rows` (default 1000), `timeout_ms` (default 30000), `approval_mode`, `config_path`
`schema`	`env` (or `sqlite_path`)	`filter` (table-name pattern like `users%`), `config_path`

Envelope statuses

ok — read succeeded; rows / tables / row_count / columns / truncated populated.
present_only — formatted SQL returned, never executed. Default for delete (DELETE/TRUNCATE) and admin (CREATE/DROP/ALTER/RENAME).
denied — privilege (GRANT/REVOKE) always; or the configured policy denied.
escalate — needs approval. Default for write (INSERT/UPDATE/REPLACE/MERGE/UPSERT); also grant_required mode and unbounded SELECT.
error — driver or SQL error after an allowed verdict.

Safety

Read-only by design. The policy gate rejects every non-read statement before any driver loads. WRITE escalates by default; DELETE/ADMIN return formatted SQL with no execution; PRIVILEGE is hard-denied. Never shell out to psql, mysql, sqlite3, mongosh, pg_dump, duckdb, or aws dynamodb — the db-connector binary is the only sanctioned channel. Never edit the operator's config to weaken a policy decision; report the decision instead.