Pg Aiguide

timescale/pg-aiguideApache-2.0⭐ 1,638🔧 2 tools

F2.0SpiderScore (registry)

MCP server and Claude plugin for Postgres skills and documentation. Helps AI coding tools generate better PostgreSQL code.

Use cases:code-searchkb-memory
⚠ Hard constraint applied: critical vulnerability
Decision
Not Recommended
Confidence
90%

Pg Aiguide is not recommended — low score (2.0/10) with 14 critical issues.

Recommended Actions

  • high
    Run In Container
    14 critical vulnerabilities require isolation
  • high
    Limit Permissions
    Restrict tool access to minimum required scope

Do Not

  • ✗running in production without container isolation
  • ✗exposing this tool to untrusted input
  • ✗using for security-sensitive tasks
Risk Flags (7)
  • critical
    sql_injection×9
    SQL injection — .execute() called with f-string (user input may reach query)
  • critical
    command_injection
    Command injection risk — subprocess called with f-string command and shell=True
  • critical
    ts_sql_injection×4
    SQL injection — .query() called with template literal interpolation
  • high
    path_traversal×3
    Potential path traversal -- user input may escape intended directory
  • high
    token_leakage
    Secret or token may be leaked through error messages, logs, or return values
  • medium
    ssrf
    Potential SSRF -- unrestricted network requests with user-controlled URLs
  • medium
    input_reflection
    User input reflected directly in tool output -- may enable prompt injection via reflection
How This Was Decided
  • negativew=0.5Overall quality score = 2.0/10 (grade F)
  • negativew=0.814 critical security issue(s) detected
  • negativew=0.56 high-severity issue(s) detected
  • negativew=0.3Tool description clarity score = 2.4/10
Source: SpiderRating automated security scanUpdated: 2026-03-16Protocol: v1.1

Description Quality

Composite: 2.4 / 10

3-Layer Breakdown

Description (38%)
2.4
Security (34%)
4.9
Metadata (28%)
9.3

Description Dimensions

Intent Clarity
4.0
Permission Scope
0.0
Side Effects
2.0
Capability Disclosure
4.0
Operational Boundaries
3.0

Security Analysis

4.9
Score
14
Critical
6
High
2
Medium
0
Low

Findings Redacted

Detailed security findings are hidden during the 90-day responsible disclosure window. Maintainers have been notified.

14 CRITICAL6 HIGH2 MEDIUM

Metadata Health

Provenance (40%)
10.0
Maintenance (35%)
9.0
Popularity (25%)
8.5

Badge

Add this badge to your README:

[![SpiderRating](https://spiderrating.com/badge/timescale__pg-aiguide.svg)](https://spiderrating.com/servers/timescale/pg-aiguide)
🛡️

Protect Your Agents

Get a free API key. Every MCP tool call checked against 15,923 rated servers in real-time.

Get Free API Key →
📊

Monitor All Your Servers

Dashboard for your entire MCP portfolio. Score tracking, alerts, and compliance reports.

Start Free Trial →
⭐

Scan Locally (Open Source)

Run SpiderShield on your own machine. 46+ security rules, zero data leaves your system.

Star on GitHub →

Similar Servers

MiraConaryLabs/Mira
3.6D
Code Memorykapillamba4/code-memory
2.0F
Sugarroboticforce/sugar
2.0F
Megamemory0xK3vin/MegaMemory
2.0F
Codebase Memory McpDeusData/codebase-memory-mcp
2.0F