data-access-layer
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill outlines a pattern for a server-side Data Access Layer (DAL) using Drizzle ORM. It provides instructions on how to enforce tenant isolation by scoping every query with an organization ID (orgId). This is a security best practice for preventing cross-tenant data access. Additionally, the skill explicitly warns against returning raw rows containing secrets and recommends using server-only imports to ensure database logic does not leak to the client bundle. No malicious patterns such as prompt injection, obfuscation, or unauthorized remote code execution were found.
Audit Metadata