skills/midudev/autoskills/sqlalchemy/Gen Agent Trust Hub

sqlalchemy

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive guide for SQLAlchemy 2.0 ORM, covering model definition, migrations with Alembic, and integration with FastAPI. All code provided consists of standard educational examples.
  • [EXTERNAL_DOWNLOADS]: The skill references installation of well-known Python packages including sqlalchemy, alembic, fastapi, asyncpg, and aiosqlite through the standard pip package manager. These are well-known, legitimate libraries.
  • [CREDENTIALS_UNSAFE]: Multiple examples contain database connection strings with placeholder credentials (e.g., postgresql://user:pass@localhost/mydb). These are clearly intended as syntax templates for developers and are annotated with pragma: allowlist secret to indicate they are not actual sensitive data.
  • [INDIRECT_PROMPT_INJECTION]: The skill documentation explicitly addresses security best practices, such as preventing SQL injection by using parameterized queries and avoiding f-string interpolation for untrusted data. This promotes secure coding practices rather than introducing vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 10:44 PM