drizzle-orm
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and API usage guides located on the official Drizzle ORM domain (orm.drizzle.team).
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest existing project data to inform its actions. 1. Ingestion points: package.json, lockfiles, schema files, and drizzle.config.*. 2. Boundary markers: Absent. 3. Capability inventory: The skill suggests executing drizzle-kit CLI commands for database management. 4. Sanitization: Absent.
- [COMMAND_EXECUTION]: The skill instructs the agent to manage database migrations and schemas using the drizzle-kit CLI tool, which is standard practice for this library.
Audit Metadata