A specialized AI agent skill designed to audit PostgreSQL schemas and queries for performance, security, and transaction safety.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install postgres-code-review
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install postgres-code-review using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is PostgreSQL Code Review?
The PostgreSQL Code Review skill is a robust diagnostic tool for developers using Openclaw Skills to maintain high-performance database layers. It provides an automated yet evidence-bound approach to reviewing SQL queries, DDL migrations, and database connection logic, ensuring that your application follows industry best practices for PostgreSQL.
This skill focuses on critical areas such as indexing strategies, advanced JSONB operations, and the prevention of SQL injection. By integrating this into your development workflow, you can catch connection leaks, inefficient sequential scans, and transaction deadlocks before they reach production, maintaining a stable and scalable data architecture.
PostgreSQL Code Review Use Cases
- Validating new database migrations for missing or inefficient indexes.
- Auditing JSONB queries to ensure proper GIN index utilization and operator usage.
- Reviewing application code for connection pool leaks and improper transaction handling.
- Identifying potential SQL injection vulnerabilities in dynamic query generation.
- Troubleshooting deadlock scenarios and long-running locks in high-concurrency environments.
How PostgreSQL Code Review Works
- Scope Definition: The skill identifies specific file paths and line ranges for SQL, DDL, and connection-handling code.
- Evidence-Based Analysis: It extracts concrete code citations for every performance or security claim to avoid speculative reporting.
- Binding Validation: The agent specifically checks how variables are bound to SQL statements to verify injection risks.
- Reference Cross-Referencing: It dynamically loads specific reference modules (indexes, jsonb, connections, or transactions) based on the code detected.
- Checklist Execution: The agent runs a comprehensive audit against a pre-defined checklist to ensure no critical database safety measures are missed.
PostgreSQL Code Review Setup
To integrate this skill into your Openclaw Skills environment, ensure your project includes the PostgreSQL reference documentation in the references/ directory.
# Example: Running a review on your repository
openclaw run postgres-code-review --path ./src/db
Ensure that indexes.md, jsonb.md, connections.md, and transactions.md are accessible for the skill to pull technical specifications during the review process.
PostgreSQL Code Review Data Schema & Taxonomy
The skill organizes its findings based on a strict evidence-bound taxonomy. Findings are mapped to the following reference structure:
| Module | Focus Area |
|---|---|
indexes.md |
B-Tree/Hash indexes, sequential scans, and composite index order. |
jsonb.md |
GIN indexes and operators like @>, ?, and ->. |
connections.md |
Pool limits, timeouts, and context manager usage. |
transactions.md |
Isolation levels, advisory locks, and deadlock prevention. |
All findings must include a file:line citation and a quoted excerpt from the source code.
PostgreSQL Code Review Advanced Features
- Multi-stage gating system ensures all findings are backed by code citations.
- Specialized logic for JSONB operator optimization and GIN index validation.
- Context-aware loading of reference materials to reduce token usage and increase accuracy.
- Support for application-level coordination reviews using PostgreSQL advisory locks.
- Deep analysis of transaction isolation levels (Read Committed vs. Serializable) based on specific use cases.
SKILL.md
Loading
Related Openclaw Skills
Passive Income System V1
A comprehensive AI-driven workflow designed to transform automated content generation into consistent passive income streams.
Scheduled Job Trigger vs Execution Failure Diagnoser
A diagnostic framework to pinpoint whether scheduled tasks failed to trigger or encountered errors during execution.
BlueCart API Skill
A comprehensive integration for the BlueCart API that enables AI agents to automate inventory, order management, and supplier workflows for the hospitality industry.
OpenCage Geocoding Integration
A powerful geocoding skill that enables AI agents to perform forward and reverse geocoding via the OpenCage API using the Membrane framework.
Web Screenshot
A professional automation tool for capturing screenshots of web applications and SPAs with full support for authenticated sessions and reactive frameworks.
SaffronAI ETF Data
A specialized tool for fetching real-time Indian ETF market data, including price and iNAV, directly from SaffronAI.
Featured*
