vibe-coding-db-bettersqlite
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides instructions for installing well-known, standard packages from the official NPM registry (
better-sqlite3,electron-rebuild). These are standard dependencies for the stated purpose of the skill. - [SAFE]: The code patterns consistently use prepared statements (e.g.,
db.prepare("...").get(data)) and parameterized queries. This is a primary security best practice for preventing SQL injection vulnerabilities in database applications. - [SAFE]: File system operations are scoped to local application data directories (e.g., using Electron's
userDatapath), which is standard behavior for embedded database storage in desktop applications. - [SAFE]: The provided
db.execcalls are used solely for static schema initialization and migration logic, representing normal database management procedures.
Audit Metadata