skills/ma1orek/replay/drizzle-orm-d1/Gen Agent Trust Hub

drizzle-orm-d1

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The provided API templates ingest untrusted user input which is processed by the database client.
  • Ingestion points: API routes in templates/cloudflare-worker-integration.ts use c.req.json() and c.req.param() to capture external data.
  • Boundary markers: None identified between untrusted data and agent instructions within the code examples.
  • Capability inventory: The skill includes the full Drizzle ORM capability set (SELECT, INSERT, UPDATE, DELETE) for database operations.
  • Sanitization: The skill mitigates risks by demonstrating the use of Drizzle's query builder for automatic parameterization and input validation (e.g., type checking for IDs).
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of dependencies and configuration from official and well-known registries.
  • Fetches the drizzle-orm and drizzle-kit packages from the public NPM registry.
  • References official Cloudflare and Drizzle documentation via public URLs.
  • [COMMAND_EXECUTION]: The skill provides scripts and instructions for system-level operations required for database management.
  • Includes scripts/check-versions.sh which uses npm commands to verify package versions.
  • Instructions detail the use of wrangler and drizzle-kit CLI tools for executing SQL and applying migrations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 11:45 AM