drizzle-knowledge-patch
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The analyzed skill consists entirely of markdown documentation and code snippets intended to update an agent's knowledge of Drizzle ORM (beta versions of v1.0.0). No malicious patterns, command injections, or exfiltration vectors were identified across the 6 analyzed files.
- [COMMAND_EXECUTION]: The skill mentions the use of
npx drizzle-kit checkin a documentation context for schema migration verification. This is a standard developer tool and is not presented as a hidden or malicious command. - [EXTERNAL_DOWNLOADS]: The skill references standard npm packages like
drizzle-ormand its subpath validators (Zod, Valibot, etc.). These are well-known libraries in the TypeScript ecosystem and their mention is consistent with the skill's stated purpose.
Audit Metadata