drizzle-safe-migrations
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides operational guidance for database migrations, outlining a defensive strategy to minimize the risk of production data loss. It instructs the agent to normalize data before tightening constraints and to use idempotent SQL updates, which are standard security and reliability best practices for database management.
- [COMMAND_EXECUTION]: The instructions reference standard project commands (e.g.,
bun run db:generate) for migration management. These commands are executed within the local development environment as part of the intended workflow and do not involve unauthorized privilege escalation or persistence mechanisms. - [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to analyze and edit local project files, such as migration scripts and the
drizzle/meta/_journal.jsonfile. While this interaction with local data constitutes an ingestion surface for potentially malicious content within a repository, the instructions provided are focused on providing a safe and auditable workflow for these tasks, and no actual injection patterns or unsafe interpolation of external data were found.
Audit Metadata