kysely
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical reference for the Kysely library. All code examples follow best practices, such as using environment variables for database credentials and parameterized queries for SQL operations.
- [EXTERNAL_DOWNLOADS]: The skill references standard, well-known developer tools and libraries including 'kysely', 'pg', 'mysql2', 'better-sqlite3', and 'kysely-codegen' via standard 'npm install' commands. These are legitimate resources for the intended use case.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or transmission was found. Database connection examples correctly demonstrate the use of 'process.env' for managing sensitive configuration.
- [INDIRECT_PROMPT_INJECTION]: While the skill documents tools for database interaction, it emphasizes type safety and secure query patterns (parameterization) that mitigate common vulnerabilities like SQL injection.
Audit Metadata