drizzle-migrations

Pass

Audited by Gen Agent Trust Hub on Apr 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or security vulnerabilities were detected in the instructions or provided code snippets.
  • [COMMAND_EXECUTION]: The skill includes instructions to execute drizzle-kit, pnpm, and npm commands. These are standard operational commands required for managing Drizzle ORM migrations and the TypeScript development environment.
  • [EXTERNAL_DOWNLOADS]: The provided GitHub Action examples reference official actions (actions/checkout, actions/setup-node) and standard package registries. These are well-known and trusted sources for development workflows.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables and repository secrets (e.g., ${{ secrets.STAGING_DATABASE_URL }}) for database connection strings, adhering to best practices by avoiding hardcoded credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 15, 2026, 08:51 PM