encore-database
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a developer guide for the Encore framework's database storage module (
encore.dev/storage/sqldb). All imports and references point to the vendor's official domain or established, well-known open-source libraries like Drizzle. - [SAFE]: The skill explicitly promotes security best practices by including a 'SQL Injection Protection' section. It demonstrates the use of tagged template literals for automatic parameterization and provides negative examples of unsafe string concatenation to warn the user/agent against insecure patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for handling user-supplied data within SQL queries, which is an inherent vulnerability surface for data-driven applications.
- Ingestion points: Data entering queries via template literal placeholders (e.g.,
${userId}) or raw positional parameters ($1, $2). - Boundary markers: Utilizes Encore's native SQL template tagging, which automatically separates SQL commands from user data at the driver level.
- Capability inventory: Includes database read, write, and schema migration capabilities.
- Sanitization: Employs automatic parameterization provided by the Encore framework to sanitize inputs.
Audit Metadata