api-database-drizzle
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation and examples focus on legitimate database management tasks using Drizzle ORM and Neon serverless Postgres.\n- [REMOTE_CODE_EXECUTION]: No suspicious remote code execution patterns were found. The skill references standard package management commands (e.g.,
bun add drizzle-seed) and official CLI tools (drizzle-kit) necessary for the intended database workflow.\n- [DATA_EXPOSURE]: Sensitive information like database connection strings is handled via environment variables (DATABASE_URL), which is the recommended practice for preventing credential exposure in source code.\n- [INDIRECT_PROMPT_INJECTION]: The skill involves processing external data (environment variables and query filters), but follows secure patterns to mitigate injection risks.\n - Ingestion points: environment variables in core.md and user-supplied filters in queries.md.\n
- Boundary markers: markdown code blocks and ORM-level parameterization in SKILL.md.\n
- Capability inventory: database read/write operations across all files in the examples/ folder.\n
- Sanitization: Drizzle ORM's parameterized query engine and sql template tags.
Audit Metadata