drizzle-orm
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists of documentation and reference material for the Drizzle ORM library. It does not contain executable code or hidden instructions.
- [SAFE]: Code examples for database connections and configuration correctly utilize environment variables (e.g.,
process.env.DATABASE_URL) rather than hardcoding sensitive credentials. - [SAFE]: The documentation explicitly promotes secure coding practices, such as the use of prepared statements and parameterized queries via
sql.placeholderto prevent SQL injection vulnerabilities. - [SAFE]: All listed dependencies (e.g.,
drizzle-orm,pg,mysql2,zod) are official and standard packages within the Node.js ecosystem, with no evidence of typosquatting or malicious package references.
Audit Metadata