tidbx-serverless-driver

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of the @tidbcloud/serverless package from the npm registry. This is the official driver provided by the vendor for serverless environments.\n- [CREDENTIALS_UNSAFE]: The documentation demonstrates secure credential management by instructing users to load the DATABASE_URL from environment variables across various runtimes like Vercel, Cloudflare, and Netlify.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides code examples that process database queries. It mitigates injection risks by demonstrating the use of parameterized queries (e.g., using placeholders like ?) rather than string concatenation.\n- [REMOTE_CODE_EXECUTION]: The skill references loading the driver via well-known ESM content delivery services (e.g., esm.sh) for Deno and Netlify Edge environments, which is standard practice for those runtimes.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 03:00 AM