drizzle-postgres

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions involve the use of standard development and version control tools including git (for diffing, moving, and searching migration files) and drizzle-kit (for schema generation and drift comparison). These operations are well-defined within the context of a developer's workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of migration SQL files and database schemas when performing tail re-sequencing and snapshot repairs. The vulnerability is mitigated by mandatory human-in-the-loop checkpoints, requiring explicit user approval before any merge or promotion to production environments.
  • [SAFE]: The skill demonstrates a strong security posture by explicitly instructing the agent to refuse non-local hosts for migration testing and to use disposable databases. It also includes warnings to audit generated SQL before use and to verify ledger hashes against committed files to ensure integrity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 05:47 AM