drizzle-orm-d1
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a shell script (
scripts/check-versions.sh) and instructions for a companion agent (agents/drizzle-migrate.md) to execute standard developer commands usingnpm,npx, andwrangler. These are used for version checking and managing database migrations. - [EXTERNAL_DOWNLOADS]: The
check-versions.shscript and migration workflow interact with the official NPM registry to verify package versions and execute CLI tools. These interactions target well-known, trusted services. - [DYNAMIC_EXECUTION]: The skill facilitates the generation of SQL migration files through
drizzle-kit generate. These files are intended to be reviewed and applied to the database using Wrangler, following best practices for schema evolution. - [DATA_EXPOSURE]: Documentation and templates (e.g.,
drizzle.config.tsandwrangler-setup.md) correctly instruct the user to handle sensitive Cloudflare credentials using environment variables and.envfiles, explicitly warning against committing these secrets to version control.
Audit Metadata