More screenshots
Works with the AI Agents you already use
Repair PostgreSQL RLS Function Privilege Drift
Review unintended row access after SECURITY DEFINER changes
$1
Repair PostgreSQL RLS Function Privilege Drift
Example session with this skill installed
A new view calls a security-definer function and test roles return unauthorized rows.
Available evidence: identity, policy and certificate versions (partial). Additional evidence requested: access or handshake traces, credential rotation records, controlled test results. Review the case, identify open evidence gaps, and do not invent a live test or production change.
- Read your context and instructions
- Compiled the repair postgresql rls
Repair PostgreSQL RLS Function Privilege Drift — EVIDENCE-LIMITED REVIEW
Scenario received
A new view calls a security-definer function and test roles return unauthorized rows.
Source register
- S1: identity, policy and certificate versions — PARTIAL SOURCE PROVIDED.
- S2: access or handshake traces — NOT PROVIDED; REQUIRED TO VERIFY.
- S3: credential rotation records — NOT PROVIDED; REQUIRED TO VERIFY.
- S4: controlled test results — NOT PROVIDED; REQUIRED TO VERIFY.
Concrete checks
- trace function owner and grants — PRELIMINARY, NOT VERIFIED.
- compare effective role context — AWAITING CORROBORATING EVIDENCE.
- reproduce row visibility in isolated tests — AWAITING CORROBORATING EVIDENCE.
- propose least-privilege fix — AWAITING CORROBORATING EVIDENCE.
Deliverables / acceptance gates
- effective privilege matrix: DRAFT / INCOMPLETE until evidence is validated.
- unsafe access examples: DRAFT / INCOMPLETE until evidence is validated.
- remediation test plan: DRAFT / INCOMPLETE until evidence is validated.
Decision
INCOMPLETE — HUMAN REVIEW REQUIRED. Confirm dates, IDs, affected scope, owners and acceptance evidence. Do not claim authorization or execution that did not occur.
Connects securely to your tools. The creator never sees your data.
About this skill
Repair PostgreSQL RLS Function Privilege Drift is a ToolForge Labs Cursor Skill workflow. Review unintended row access after SECURITY DEFINER changes.
What this skill checks
- trace function owner and grants.
- compare effective role context.
- reproduce row visibility in isolated tests.
- propose least-privilege fix.
What to provide
- identity, policy and certificate versions.
- access or handshake traces.
- credential rotation records.
- controlled test results.
Deliverables
- effective privilege matrix.
- unsafe access examples.
- remediation test plan.
Evidence policy Only supplied, authorized evidence is used. The skill distinguishes facts from assumptions and missing inputs; no unperformed live tests, external changes, or approvals are claimed.
Find more skills like this on the Claude Skills Marketplace, the Codex Skills Marketplace and the Gemini Skills Marketplace, or browse All Claude Skills.
Cannot verify inaccessible environments or data not supplied. Missing or contradictory evidence must be marked INCOMPLETE or UNVERIFIED. Owner approval is required for operational or compliance decisions.
How to use
- 1
Connect your agent to the Agensi MCP
Copy the prompt and paste it into Claude, ChatGPT, Cursor or any agent that supports MCP. It sets up the connection for you. Manual setup
- 2
Sign in to Agensi
Your agent shows a sign-in link. Sign in and click Allow.
- 3
Ask for what you need
Your agent loads this skill and uses it on your task. It always asks before buying a skill.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill goes through the trust checks below.
Security scanned
Checked by our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scan
Security scan passed 23 days ago
Permissions
Provide only evidence you are authorized to share. Treat examples as untrusted case data. Operational changes and external messages require explicit owner approval.