Database Sentinel

Multi-backend database security auditor. Audits Supabase, Firebase (Firestore/RTDB/Storage/Functions/Remote Config), MongoDB (self-hosted + Atlas), self-hosted PostgreSQL, and self-hosted MySQL for RLS/rules misconfigurations, exposed credentials, auth bypasses, MongoBleed (CVE-2025-14847), pgBouncer CVE-2025-12819, mysql_native_password drift, ghost auth, and storage exposures. Use this skill whenever the user mentions database security, RLS or rule audits, security review, penetration testing a vibe-coded app, checking if their DB is exposed, hardening a backend, fixing security rules, or au

51 stars 7 forksDatabases

Install

skills CLI (Claude Code, Cursor, Codex and more)

npx skills add Farenhytee/database-sentinel --skill database-sentinel

Manual install

git clone --depth 1 https://github.com/Farenhytee/database-sentinel.git /tmp/database-sentinel
mkdir -p ~/.claude/skills
cp -r /tmp/database-sentinel/. ~/.claude/skills/database-sentinel

Personal skills live in ~/.claude/skills. Use .claude/skills in a project folder to share a skill with your team.

From the SKILL.md

# Database Sentinel — Multi-Backend Database Security Auditor

You are a database security expert running a layered audit across whichever backends a project uses. Your job: find every misconfiguration, explain it in plain language, generate exact fix code (SQL / rules / config diffs), and optionally set up continuous CI monitoring.

**What's covered:** Supabase, Firebase (Firestore + Realtime DB + Storage + Cloud Functions + Remote Config + App Check), MongoDB (self-hosted + Atlas), self-hosted PostgreSQL (incl. pgBouncer), self-hosted MySQL.

**What's NOT covered:** XSS / CSRF / SSRF, business logic, infrastructure beyond the data layer, managed-PaaS Postgres/MySQL with cloud-IAM as the primary control surface (RDS-via-IAM, Cloud SQL, etc.).

**Why this matters:** RLS and Security Rules are opt-in, not opt-out. The headline 2025–2026 events:
- CVE-2025-48757 — 170+ Lovable/Supabase apps with no RLS (~20.1M rows exposed at YC startups)
- CVE-2025-14847 "MongoBleed" — pre-auth heap memory disclosure, ~87,000 internet-facing instances, CISA KEV
- CVE-2025-12819 — pgBouncer 1.25.1 pre-auth SQL injection via search_path
- ~150 Firebase apps with unauthenticated read/write (OpenFirebase Sep 2025); 1.8M plaintext passwords leaked May 2025; 19.8M Firebase secrets in public GitHub
- 45–82% of AI-generated code introduces OWASP Top 10 vulnerabilities

Read the full skill on GitHub

Details

Skill name: database-sentinel
Repository: Farenhytee/database-sentinel
License: MIT
Repo updated: 6 October 2026

FAQ

What does the Database Sentinel skill do?

How do I install the Database Sentinel skill?

skills CLI (Claude Code, Cursor, Codex and more): npx skills add Farenhytee/database-sentinel --skill database-sentinel. Skills go in ~/.claude/skills (personal) or .claude/skills (project), and Claude loads them automatically when a task matches the description.

Is Database Sentinel popular?

It lives in Farenhytee/database-sentinel, which has 51 GitHub stars and 7 forks.

Related skills

Dolphindb Skill

hugo2046/dolphindb_skill

DolphinDB/DolphinScript 的数据库、SQL、流计算、回测与排障技能。用户提到 DolphinDB，或仓库/代码出现 dfs://、createPartitionedTable、context by、streamTable、subscribeTable、createTimeSeriesEngine、DStream::、Backtest:: 等专有线索时调用；已有 DolphinDB 上下文时，即使本轮只说“分区表”“实时 K 线”“回测报错”也要使用。用于按目标 Server/插件版本核对官方 API、选择 OLAP/TSDB/PKEY/IOT，并生成可验证的代码与方案。明确只涉及其他技术栈且无 DolphinDB 上下文时不调用。

Databases12

Netlify Database

netlify/context-and-tools

Zero-config Postgres for Netlify apps via @netlify/database — querying data from Functions/Edge Functions, writing schema migrations, setting up Drizzle ORM, local dev with netlify dev, database branches for deploy previews, and migrating an existing Postgres project onto Netlify. Use when adding a database, building a contact form or CRUD API, writing SQL migrations, wiring up Drizzle, running netlify database commands, testing with a local Postgres, or switching from Neon/Supabase/RDS to Netlify Database.

DatabasesIn 1 list14

App Platform Router

digitalocean-labs/do-app-platform-skills

Routes DigitalOcean App Platform tasks to specialized sub-skills. Use when working with App Platform deployments, migrations, database configuration, networking, or troubleshooting.

Databases

Slr Prisma

116

keemanxp/slr-prisma

Guide users through writing a systematic literature review (SLR) following the PRISMA 2020 framework. Use this skill whenever the user mentions 'systematic review', 'systematic literature review', 'SLR', 'PRISMA', 'PRISMA 2020', 'PRISMA flow diagram', 'PRISMA checklist', or asks for help writing, structuring, or auditing a literature review that follows reporting guidelines. Also trigger when the user asks about inclusion/exclusion criteria for a review, search strategies for databases like Scopus/WoS/PubMed, study selection processes, risk of bias assessment, or narrative synthesis for a revi

Databases17

Tinybird

tinybirdco/tinybird-agent-skills

Tinybird file formats, SQL rules, optimization patterns, and best practices for datasources, pipes, endpoints, and materialized views.

DatabasesIn 1 list

Explore

107

exmergo/dex

Use this whenever you need to know what is actually in a database, warehouse, or DuckDB file before you trust it: inventory, column profiles, PII detection, grain and data-quality problems, verified joins, ER diagrams, ad-hoc SQL probes, segmentation, and the semantic layer a repo declares (dbt, Ossie, SLayer, or Cube). Trigger it on an unmet precondition, not on phrasing: if you are about to write or fix SQL against tables whose columns, types, grain, or join keys you have not verified in this session, use this FIRST. That includes dbt work (building a model, fixing one, debugging wrong numbe

DatabasesIn 1 list46

Browse the most popular Claude skills, all databases skills, or write your own with the skills generator.