postgres

Execute parameterized PostgreSQL queries to prevent SQL injection.

11|8|Updated Jan 29, 2026
One-click install
npx skills add https://github.com/tallclub/matimo --skill postgres-tallclub
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: postgres
Source: https://github.com/tallclub/matimo/tree/main/typescript/packages/postgres/skills/postgres
Command: npx skills add https://github.com/tallclub/matimo --skill postgres-tallclub

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Parameterized, safe SQL execution is essential to prevent injection attacks and ensure consistent data handling when interacting with PostgreSQL databases.

Core Features & Use Cases

  • Parameterized query execution for safety against injection.
  • Schema discovery, data retrieval, and write operations using safe patterns.
  • Use Case: Connect to a PostgreSQL database and run validated, parameterized statements such as selects, inserts, and updates without reconstructing SQL strings.

Quick Start

Use the postgres-execute-sql tool to run a parameterized query against your PostgreSQL database.

Frequently Asked Questions about postgres

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run parameterized SQL queries in PostgreSQL to prevent injection attacks?

To prevent SQL injection in PostgreSQL, you execute parameterized queries that separate SQL code from user input. This approach enforces safe execution patterns for data retrieval and write operations without reconstructing SQL strings.

What PostgreSQL operations are supported with parameterized query execution?

Parameterized query execution supports schema discovery, data retrieval, and write operations including insert, update, and delete. These common database tasks run safely against a PostgreSQL database using a dedicated execution tool.

Do I need a specific database driver to execute parameterized PostgreSQL statements?

Yes, you need a PostgreSQL driver and an environment configured for parameterized execution. This setup allows the dedicated postgres-execute-sql tool to connect to your database and safely run validated statements.

What is the best way to perform schema discovery in PostgreSQL safely?

The best way to perform safe schema discovery in PostgreSQL is by using parameterized query execution. This mechanism protects operations from SQL injection by enforcing safe execution patterns during database exploration.

Can I use this approach for both reading and writing data in PostgreSQL?

Yes, parameterized queries apply to both data retrieval and write operations like insert, update, and delete. This ensures consistent data handling and protects against injection attacks across all common PostgreSQL tasks.