drizzle-orm
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/check-updates.pyconnects to the official npm registry (registry.npmjs.org) to retrieve the latest version of thedrizzle-ormpackage. This is a well-known service and the operation is used for version verification. - [INDIRECT_PROMPT_INJECTION]: The skill has a minimal attack surface for indirect injection. The update script processes a local configuration file (
VERSION.json) and specific JSON fields from the npm registry API response, without executing or interpolating untrusted content into agent prompts. - [COMMAND_EXECUTION]: Installation and migration instructions utilize standard package managers (
npm,pnpm,yarn,bun) and the officialdrizzle-kitCLI. These are expected developer tools and do not involve any high-risk command patterns.
Audit Metadata