effect-sql
Pass
Audited by Gen Agent Trust Hub on May 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation follows industry-standard security best practices for database interaction.
- SQL Injection Prevention: It exclusively uses tagged template literals for query construction, which ensures parameters are safely interpolated and escaped by the driver, preventing SQL injection attacks.
- Credential Safety: The documentation provides examples of using
Redacted.makeandConfig.redactedto handle sensitive information like database passwords and URLs, which is a recommended practice to avoid accidental exposure in logs or traces. - Input/Output Validation: It encourages the use of
SqlSchemaandModelclasses to validate data entering and leaving the database, reducing the risk of schema confusion or unexpected data processing. - Anti-Pattern Warnings: Explicitly warns users against dangerous practices such as string concatenation in queries and ignoring transactions for multi-statement mutations.
Audit Metadata