drizzle-migrate
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
npx drizzle-kitfor database operations likepush,generate, andmigrate. These are standard, legitimate commands for the Drizzle ORM ecosystem and are necessary for the skill's primary function. - [SAFE]: The skill adheres to security best practices by recommending the use of
.envfiles for theDATABASE_URLcredential rather than hardcoding secrets. No signs of obfuscation, remote code execution from untrusted sources, or persistence mechanisms were detected.
Audit Metadata