SELECT NOT IN syntax error?

Use pg-promise for nodejs .
You need to make a selection in NOT IN condition. In the example, the option which comes array.
https://github.com/vitaly-t/pg-promise/wiki/Learn-...
I have a view object

let obj = { limit: limit list: list // array here };

The query itself:

return db.query(` SELECT * FROM table WHERE id NOT IN (${obj.list}:csv) LIMIT ${obj.limit} `);

There is a bug

{ error: syntax error (approximate position: ":")

1. What are you doing wrong?
2. How to substitute parameters in the request that all potentially dangerous characters escapees? I have correctly set up or not?