tidbx-serverless-driver
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of the
@tidbcloud/serverlesspackage from the npm registry. This is the official driver provided by the vendor for serverless environments.\n- [CREDENTIALS_UNSAFE]: The documentation demonstrates secure credential management by instructing users to load theDATABASE_URLfrom environment variables across various runtimes like Vercel, Cloudflare, and Netlify.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides code examples that process database queries. It mitigates injection risks by demonstrating the use of parameterized queries (e.g., using placeholders like?) rather than string concatenation.\n- [REMOTE_CODE_EXECUTION]: The skill references loading the driver via well-known ESM content delivery services (e.g., esm.sh) for Deno and Netlify Edge environments, which is standard practice for those runtimes.
Audit Metadata