drizzle-orm
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference guide for Drizzle ORM, covering schema definition, query patterns, and performance optimization. It includes explicit warnings against insecure practices, such as building raw SQL strings without using the provided type-safe templates.
- [SAFE]: All external dependencies listed (e.g.,
drizzle-orm,pg,mysql2,zod,@neondatabase/serverless) are well-known, legitimate packages from the official NPM registry. - [SAFE]: Network references and integration examples target well-known and trusted services such as Neon, Supabase, and Cloudflare Workers.
- [SAFE]: Secret management practices demonstrated in the code examples follow industry standards, encouraging the use of environment variables (e.g.,
process.env.DATABASE_URL) rather than hardcoded credentials. - [SAFE]: No evidence of obfuscation, prompt injection, or unauthorized data access was found across any of the documentation or script examples.
Audit Metadata