sqlalchemy
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for SQLAlchemy 2.0 ORM, covering model definition, migrations with Alembic, and integration with FastAPI. All code provided consists of standard educational examples.
- [EXTERNAL_DOWNLOADS]: The skill references installation of well-known Python packages including
sqlalchemy,alembic,fastapi,asyncpg, andaiosqlitethrough the standardpippackage manager. These are well-known, legitimate libraries. - [CREDENTIALS_UNSAFE]: Multiple examples contain database connection strings with placeholder credentials (e.g.,
postgresql://user:pass@localhost/mydb). These are clearly intended as syntax templates for developers and are annotated withpragma: allowlist secretto indicate they are not actual sensitive data. - [INDIRECT_PROMPT_INJECTION]: The skill documentation explicitly addresses security best practices, such as preventing SQL injection by using parameterized queries and avoiding f-string interpolation for untrusted data. This promotes secure coding practices rather than introducing vulnerabilities.
Audit Metadata