drizzle-orm
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a documentation reference for Drizzle ORM, providing code snippets for database schema definitions, queries, and migrations. All code examples follow standard industry patterns for TypeScript ORM usage.
- [SAFE]: Includes explicit security guidance regarding the use of
sql.raw(), advising developers to never pass untrusted user input to it to prevent SQL injection. - [SAFE]: Recommends the use of
drizzle-zodfor input validation, promoting secure coding practices for schema validation and data sanitization. - [SAFE]: All external tools and packages mentioned, such as
drizzle-kit,@electric-sql/pglite, and@electric-sql/client, are standard and well-known libraries within the development ecosystem. - [SAFE]: Recommendations for adding related skills (e.g.,
tanstack-query,electricsql) reference the same vendor ('oakoss') and follow standard package runner patterns (npx, pnpm dlx).
Audit Metadata