drizzle-database

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference guide for Drizzle ORM implementation. All code examples provided in references/schema-patterns.md, references/query-patterns.md, and references/migrations-and-testing.md are standard TypeScript/Node.js patterns for database interaction.
  • [DATA_EXPOSURE]: The database connection logic in references/migrations-and-testing.md uses a connectionString parameter. This is a secure practice as it avoids hardcoding credentials and assumes the secret is managed by the execution environment or a .env file.
  • [INDIRECT_PROMPT_INJECTION]: While the skill provides patterns for database queries that could potentially process user input, Drizzle ORM primitives (such as db.select and db.insert) utilize parameterized queries by default, significantly reducing the risk of SQL injection. The use of the sql template tag in references/query-patterns.md is also part of the Drizzle API designed for safe aggregation and raw SQL fragments.
  • [EXTERNAL_DOWNLOADS]: The skill references standard Node.js packages including drizzle-orm, pg, and @paralleldrive/cuid2. These are well-known, legitimate libraries in the JavaScript ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 02:33 PM