motherduck-connect
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides documentation and code templates for connecting applications to MotherDuck services via established, standard protocols (PostgreSQL wire protocol and native DuckDB API).
- [SAFE]: Security best practices are actively promoted, specifically the instruction to use environment-managed secrets (
MOTHERDUCK_TOKEN) instead of hardcoding credentials in source code. - [SAFE]: Connectivity patterns for Python (
psycopg2,sqlalchemy) and Node.js (pg,@duckdb/node-api) use official client libraries from the respective ecosystems. - [SAFE]: The skill enforces SSL requirements (
sslmode=verify-full) for PostgreSQL endpoint connections, protecting data in transit. - [SAFE]: No suspicious remote code execution or unauthorized data access patterns were identified.
Audit Metadata