python-database
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes secure coding practices by explicitly warning against string interpolation in SQL queries to prevent SQL injection. It demonstrates the use of parameter binding (
?placeholders) and dictionary-based parameters. - [SAFE]: It provides a robust pattern for connection management using
@contextmanager, ensuring that database connections are properly closed even in the event of errors, which prevents file locking issues. - [SAFE]: The documentation correctly identifies that
sqlite3calls are blocking and provides safe patterns for integrating them into asynchronous applications (e.g., usingrun_in_threadpoolorasyncio.to_thread) to prevent stalling the event loop. - [SAFE]: It correctly instructs users to verify and enable foreign key enforcement (
PRAGMA foreign_keys = ON) per connection, which is a known SQLite default behavior that can lead to data integrity issues if ignored.
Audit Metadata