effect-sql

Pass

Audited by Gen Agent Trust Hub on May 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill documentation follows industry-standard security best practices for database interaction.
  • SQL Injection Prevention: It exclusively uses tagged template literals for query construction, which ensures parameters are safely interpolated and escaped by the driver, preventing SQL injection attacks.
  • Credential Safety: The documentation provides examples of using Redacted.make and Config.redacted to handle sensitive information like database passwords and URLs, which is a recommended practice to avoid accidental exposure in logs or traces.
  • Input/Output Validation: It encourages the use of SqlSchema and Model classes to validate data entering and leaving the database, reducing the risk of schema confusion or unexpected data processing.
  • Anti-Pattern Warnings: Explicitly warns users against dangerous practices such as string concatenation in queries and ignoring transactions for multi-statement mutations.
Audit Metadata
Risk Level
SAFE
Analyzed
May 15, 2026, 12:07 PM