drizzle-orm

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation reference for Drizzle ORM, providing code snippets for database schema definitions, queries, and migrations. All code examples follow standard industry patterns for TypeScript ORM usage.
  • [SAFE]: Includes explicit security guidance regarding the use of sql.raw(), advising developers to never pass untrusted user input to it to prevent SQL injection.
  • [SAFE]: Recommends the use of drizzle-zod for input validation, promoting secure coding practices for schema validation and data sanitization.
  • [SAFE]: All external tools and packages mentioned, such as drizzle-kit, @electric-sql/pglite, and @electric-sql/client, are standard and well-known libraries within the development ecosystem.
  • [SAFE]: Recommendations for adding related skills (e.g., tanstack-query, electricsql) reference the same vendor ('oakoss') and follow standard package runner patterns (npx, pnpm dlx).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:50 AM