drizzle-orm

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/check-updates.py connects to the official npm registry (registry.npmjs.org) to retrieve the latest version of the drizzle-orm package. This is a well-known service and the operation is used for version verification.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a minimal attack surface for indirect injection. The update script processes a local configuration file (VERSION.json) and specific JSON fields from the npm registry API response, without executing or interpolating untrusted content into agent prompts.
  • [COMMAND_EXECUTION]: Installation and migration instructions utilize standard package managers (npm, pnpm, yarn, bun) and the official drizzle-kit CLI. These are expected developer tools and do not involve any high-risk command patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — drizzle-orm