## Summary - rename the human-facing product name from "PostgreSQL Skills" to "Postgres Skills" - preserve the stable `postgres-skills` plugin ID, marketplace name, namespace, and installation commands - add a regression test separating the display name from the machine identifier ## Validation - `claude plugin validate .\plugin` - 62 repository structure, link, and terminology tests pass Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com> Copilot-Session: d602e64b-556b-4b04-b723-fca569cfb2e6
postgres-skills plugin
The installable plugin payload for the postgres-skills marketplace. It bundles
the PostgreSQL skill and the postgres-mcp MCP server so AI-agent CLIs (GitHub Copilot CLI,
Claude Code, Codex) can route PostgreSQL work to the right guidance and tools.
Contents
| Path | Purpose |
|---|---|
skills/postgresql-best-practices/ |
The skill (SKILL.md routing table + reference docs). |
.mcp.json |
Declares the postgres-mcp MCP server (local stdio through npx, with optional telemetry disabled). |
SETUP.md |
Connection, permissions, data-access, privacy, and removal guidance. |
.claude-plugin/plugin.json |
Plugin identity and display metadata for Claude Code. |
.codex-plugin/plugin.json |
Plugin manifest required by Codex. |
Plugin manifests
Codex requires a manifest at .codex-plugin/plugin.json inside the plugin folder.
Without it, codex plugin add postgres-skills@postgres-skills fails with
Error: missing plugin.json.
Claude Code reads plugin metadata from .claude-plugin/plugin.json. Keep both
manifests and the marketplace metadata in .github/plugin/marketplace.json at the
same release version.
Security and privacy
The plugin launches
@microsoft/postgres-mcp locally
through npx. It can read from and write to the database permitted by the
selected PostgreSQL role, and its CSV tools can read explicitly approved local
paths. Database information returned by the MCP server becomes part of the
user's AI-assistant interaction.
The bundled configuration disables postgres-mcp telemetry. Use a dedicated, least-privilege role and a read-only profile for exploration. The skills require confirmation before database writes, file imports, graph writes, or Azure resource changes. See SETUP.md for the complete access and data-use disclosure.