drizzle-postgres
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions involve the use of standard development and version control tools including
git(for diffing, moving, and searching migration files) anddrizzle-kit(for schema generation and drift comparison). These operations are well-defined within the context of a developer's workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of migration SQL files and database schemas when performing tail re-sequencing and snapshot repairs. The vulnerability is mitigated by mandatory human-in-the-loop checkpoints, requiring explicit user approval before any merge or promotion to production environments.
- [SAFE]: The skill demonstrates a strong security posture by explicitly instructing the agent to refuse non-local hosts for migration testing and to use disposable databases. It also includes warnings to audit generated SQL before use and to verify ledger hashes against committed files to ensure integrity.
Audit Metadata