drizzle-sqlite-scaffold

Pass

Audited by Gen Agent Trust Hub on May 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill functions as a code generator for Drizzle ORM projects. Its operations, including template rendering and file creation, are transparent and consistent with its stated purpose. It enforces secure and performance-oriented database conventions, such as WAL mode, foreign key pragmas, and protected singleton clients.
  • [EXTERNAL_DOWNLOADS]: The skill prompts for the installation of standard, well-known libraries from the official npm registry, including drizzle-orm, drizzle-kit, better-sqlite3, @libsql/client, and zod. These dependencies are foundational to the Drizzle ecosystem.
  • [COMMAND_EXECUTION]: The skill instructs the agent to perform standard development tasks using CLI tools, such as npm install for dependency management and npx drizzle-kit for database schema generation and migration. These actions are within the expected scope of a scaffolding tool.
Audit Metadata
Risk Level
SAFE
Analyzed
May 20, 2026, 04:38 PM
Security Audit — agent-trust-hub — drizzle-sqlite-scaffold