sqlalchemy-postgres
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill guides the user to implement database operations using SQLAlchemy 2.0's async features, emphasizing type safety and secure data access patterns.
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard Python packages from official registries, including
sqlalchemy,pydantic,alembic, andasyncpg. - [COMMAND_EXECUTION]: Instructions include the usage of legitimate development tools such as
pipfor package management and thealembicCLI for managing database migrations. - [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling database records that could originate from untrusted sources. It mitigates this risk by demonstrating strict Pydantic schema validation and the use of SQLAlchemy's parameterized queries, which isolate data from executable commands.
Audit Metadata