Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/cilangzzz/yudao-skill-pronpx agentmods add skills/cilangzzz/yudao-skill-pro/db-opsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/cilangzzz/yudao-skill-pro/db-ops)<a href="https://agentmods.dev/skills/cilangzzz/yudao-skill-pro/db-ops"><img src="https://agentmods.dev/badge/skills/cilangzzz/yudao-skill-pro/db-ops/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/cilangzzz/yudao-skill-pro/db-ops"><img src="https://agentmods.dev/badge/skills/cilangzzz/yudao-skill-pro/db-ops.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00180 | $0.03052 |
| Opus 5.5 | $0.00072 | $0.01221 |
| Sonnet 5.5 | $0.00036 | $0.00610 |
| Haiku 4.5 | $0.00018 | $0.00305 |
Grade D, and why
db-ops scanned grade D with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 3d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Reaches for credential fileshighPrivilege escalation
SSH keys, cloud credentials, git-credentials, .npmrc, /etc/shadow: reading these is how a config file becomes a credential leak.
IdentityFile ~/.ssh/id_rsa Enumerates other installed skillsmediumAgent snooping
Other skills' SKILL.md files reveal prompts, capabilities and secrets that should be invisible to peers.
ls -d .claude/skills/ssh-skill 2>/dev/null \ How it starts
The opening of the file, as written. The whole thing — 320 lines — stays where its author put it; the contents beside it link to each section on GitHub.
数据库操作技能 (db-ops)
本技能提供一套安全的工作流让 agent 在 yudao 项目中执行数据库操作。技能本身只是文档与流程指引，真正的执行依赖：
- 本地环境：DB 客户端（mysql / psql / sqlplus / sqlcmd 等）
- 远程环境：badseal/ssh-skill（首次使用前会自动检测与安装）
快速上手
这是什么
一个轻量级指引技能，让 Claude Code 在 yudao 项目里安全地执行数据库操作。它本身不包含可执行脚本，而是：
- 约定工作流：解析 yaml → 选择连接方式 → dry-run → 执行 → 自检
- 委托底层操作：本地 DB 客户端、远程 badseal/ssh-skill
何时触发
agent 看到以下意图时会自动调用本技能：
- "帮我跑一下 SQL"、"建表"、"插入测试数据"
- "验证一下表结构"、"对比数据"
- 任何涉及 yudao 数据库的 DDL / DML / DQL
首次使用
agent 会自动检查以下 3 件事：
| 检查 | 缺失时 agent 行为 |
|---|---|
.claude/skills/ssh-skill/ 是否存在 |
提示运行 npx skills add https://github.com/badseal/ssh-skill --skill ssh-skill |
mysql / psql / sqlplus 等客户端是否安装 |
询问用户安装方式 |
| 当前激活的 profile 与 SSH 别名 | 询问用户 |
用户需提前配置：
# ~/.ssh/config 中预先添加（如需远程连接）
Host yudao-dev-db
HostName dev-db.internal
User op
IdentityFile ~/.ssh/id_rsa
故障排查
| 症状 | 可能原因 | 处理 |
|---|---|---|
ssh-skill not found |
未安装 | npx skills add ... |
mysql: command not found |
客户端缺失 | 安装 mysql-client |
permission denied |
DB 用户权限不足 | 切换有权限的 profile 或申请授权 |
connection refused |
host/port 错 / SSH 别名错 | 核对 application-{profile}.yaml 与 ~/.ssh/config |
YES-DESTRUCTIVE required |
prod DDL 未带 token | 重新执行并显式输入 token |
0. 前置检查（每次对话首次使用时）
agent 必须先做以下 4 项检查，并在结果汇总后再继续：
0.1 检测 badseal/ssh-skill 是否已安装
ls -d .claude/skills/ssh-skill 2>/dev/null \
|| ls -d ~/.claude/skills/ssh-skill 2>/dev/null \
|| echo "NOT_INSTALLED"
- 已安装：跳过 0.2
- 未安装：执行 0.2
0.2 安装 badseal/ssh-skill（未安装时执行一次）
npx skills add https://github.com/badseal/ssh-skill --skill ssh-skill
安装位置：项目级
.claude/skills/ssh-skill/（如需用户级用--global）。 安装后告知用户：badseal/ssh-skill 的官方文档地址 https://github.com/badseal/ssh-skill
0.3 检测本地 DB 客户端
for cmd in mysql psql sqlplus sqlcmd disql ksql; do
command -v "$cmd" >/dev/null && echo "$cmd: $(command -v $cmd)" || echo "$cmd: NOT FOUND"
done
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 3d ago First seen · 320 lines · 180 tokens per session scan D 381d458a82ab
db-ops is a skill published in the GitHub repository cilangzzz/yudao-skill-pro (35 stars, last pushed 4d ago), licensed MIT. It adds 180 tokens to every session and 3,052 once invoked, about $0.0007 per session on Opus 5.5. A static security scan graded it D with 2 findings (reaches for credential files, enumerates other installed skills). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-15.
Other skills, from other repositories
create-pr
Creates a GitHub PR with a Linear-ticket-prefixed title and a decision-led, narrative description for Prisma 8. Use when the user wants to create a pull request, open a PR, or submit changes for review.
schema-exploration
Lists tables, describes columns and data types, identifies foreign key relationships, and maps entity relationships in a database. Use when the user asks about database schema, table structure, column types, what tables exist, ERD, foreign keys, or how entities relate.
atlas-mssql
SQL Server specifics for Atlas (also Azure SQL and MSSQL): login, dev database and URL scope (mode=schema vs mode=database, the database query parameter), compatibility level and collation, system-generated constraint names, clustered index defaults and datetime2 precision in HCL, GO batches and the delimiter…
ha-data-stores
Map of Hope Agent's local data stores and safe read-only query workflow. Use when the user asks where Hope Agent stores data, wants to inspect sessions/messages/memory/logs/background jobs/knowledge indexes/settings, asks the model to query local app data, or debugging requires checking persisted state. Trigger…
nornicdb-cypher-queries
Pick fast, predictable Cypher query shapes in NornicDB — point lookups, batch retrieval, pagination, search, traversal, batched UNWIND/MERGE writes, cleanup, multi-tenant isolation. Use when writing or reviewing Cypher whose latency or throughput matters; maps user intent to the executor's hot-path query templates.
volcengine-rds-postgresql
A tool for operating PostgreSQL databases hosted by Volcano Engine's managed database service. PostgreSQL is a relational database used to store structured application data.