drizzle-database
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for Drizzle ORM implementation. All code examples provided in
references/schema-patterns.md,references/query-patterns.md, andreferences/migrations-and-testing.mdare standard TypeScript/Node.js patterns for database interaction. - [DATA_EXPOSURE]: The database connection logic in
references/migrations-and-testing.mduses aconnectionStringparameter. This is a secure practice as it avoids hardcoding credentials and assumes the secret is managed by the execution environment or a.envfile. - [INDIRECT_PROMPT_INJECTION]: While the skill provides patterns for database queries that could potentially process user input, Drizzle ORM primitives (such as
db.selectanddb.insert) utilize parameterized queries by default, significantly reducing the risk of SQL injection. The use of thesqltemplate tag inreferences/query-patterns.mdis also part of the Drizzle API designed for safe aggregation and raw SQL fragments. - [EXTERNAL_DOWNLOADS]: The skill references standard Node.js packages including
drizzle-orm,pg, and@paralleldrive/cuid2. These are well-known, legitimate libraries in the JavaScript ecosystem.
Audit Metadata