python-database

Pass

Audited by Gen Agent Trust Hub on Oct 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill promotes secure coding practices by explicitly warning against string interpolation in SQL queries to prevent SQL injection. It demonstrates the use of parameter binding (? placeholders) and dictionary-based parameters.
  • [SAFE]: It provides a robust pattern for connection management using @contextmanager, ensuring that database connections are properly closed even in the event of errors, which prevents file locking issues.
  • [SAFE]: The documentation correctly identifies that sqlite3 calls are blocking and provides safe patterns for integrating them into asynchronous applications (e.g., using run_in_threadpool or asyncio.to_thread) to prevent stalling the event loop.
  • [SAFE]: It correctly instructs users to verify and enable foreign key enforcement (PRAGMA foreign_keys = ON) per connection, which is a known SQLite default behavior that can lead to data integrity issues if ignored.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 23, 2026, 10:44 AM