neon-drizzle
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements secure credential management by guiding users to store sensitive database connection strings in environment files (.env or .env.local) and explicitly reminding them to include these files in .gitignore.
- [SAFE]: All external dependencies are restricted to official, well-known packages from the Neon ecosystem (@neondatabase/serverless) and standard ORM tools (drizzle-orm, drizzle-kit), minimizing supply chain risks.
- [SAFE]: Command execution is used appropriately for local environment detection (e.g., checking for package managers and frameworks) and for running standard database administration tasks through official CLI tools.
- [SAFE]: The provided scripts and templates for schema generation and migration are transparent and serve legitimate development purposes, with no evidence of obfuscation or malicious intent.
Audit Metadata