sqlalchemy-orm
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a technical guide for SQLAlchemy ORM and includes standard, secure code samples for database integration, migrations, and testing.
- [EXTERNAL_DOWNLOADS]: The instructions recommend installing official and widely-used Python packages (sqlalchemy, alembic, fastapi, aiosqlite, asyncpg) from public registries. These are established libraries appropriate for the stated purpose.
- [DATA_EXPOSURE_AND_EXFILTRATION]: Database connection examples use generic placeholders (e.g., 'postgresql://user:pass@localhost/mydb') rather than hardcoded credentials. The examples promote the use of environment variables for database URLs in production settings.
- [INDIRECT_PROMPT_INJECTION]: While the skill provides templates for creating API endpoints that handle user-supplied data, the examples implement proper sanitization through Pydantic models and SQLAlchemy's built-in protection against SQL injection.
Audit Metadata