drizzle-orm-d1
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The provided API templates ingest untrusted user input which is processed by the database client.
- Ingestion points: API routes in
templates/cloudflare-worker-integration.tsusec.req.json()andc.req.param()to capture external data. - Boundary markers: None identified between untrusted data and agent instructions within the code examples.
- Capability inventory: The skill includes the full Drizzle ORM capability set (SELECT, INSERT, UPDATE, DELETE) for database operations.
- Sanitization: The skill mitigates risks by demonstrating the use of Drizzle's query builder for automatic parameterization and input validation (e.g., type checking for IDs).
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of dependencies and configuration from official and well-known registries.
- Fetches the
drizzle-ormanddrizzle-kitpackages from the public NPM registry. - References official Cloudflare and Drizzle documentation via public URLs.
- [COMMAND_EXECUTION]: The skill provides scripts and instructions for system-level operations required for database management.
- Includes
scripts/check-versions.shwhich usesnpmcommands to verify package versions. - Instructions detail the use of
wrangleranddrizzle-kitCLI tools for executing SQL and applying migrations.
Audit Metadata