drizzle-orm

Pass

Audited by Gen Agent Trust Hub on Jul 30, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a legitimate documentation set and workflow guide for the Drizzle ORM 1.0 release candidate. It encourages standard development practices and utilizes the official toolchain.
  • [EXTERNAL_DOWNLOADS]: The skill references and recommends the installation of official Drizzle packages, including drizzle-orm@rc, drizzle-kit@rc, and drizzle-seed@rc. These are well-known, official resources provided by the Drizzle team for their release candidate testing.
  • [COMMAND_EXECUTION]: The instructions involve standard CLI operations specific to the Drizzle Kit tool, such as generating migrations (drizzle-kit generate), applying migrations (drizzle-kit migrate), and schema prototyping (drizzle-kit push). These are expected behaviors for this utility.
  • [CREDENTIALS_UNSAFE]: The skill correctly demonstrates using environment variables (process.env.DATABASE_URL) to manage database connection strings, avoiding hardcoded secrets in the codebase.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 30, 2026, 04:02 PM
Security Audit — agent-trust-hub — drizzle-orm