netlify-database

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Documents the use of the netlify CLI and standard database tools like pg_dump and pg_restore. These are utilized for legitimate project initialization, local development, and database migration tasks. The skill correctly advises piping these commands directly or using gitignored directories to avoid exposing production data in source control.\n- [EXTERNAL_DOWNLOADS]: Fetches and installs packages from trusted organizations, specifically @netlify and drizzle-orm. These dependencies are standard for managing Netlify Database and SQL ORM functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages database queries and schema migrations, which present a surface for processing untrusted data.\n
  • Ingestion points: Site schema definitions in db/schema.ts and SQL migration files in netlify/database/migrations/.\n
  • Boundary markers: Includes Netlify-specific house rules that restrict the agent to documented surfaces and explicitly warn against using unparameterized SQL functions with user input.\n
  • Capability inventory: Utilizes CLI commands for database connectivity (netlify database connect) and DDL application via migrations.\n
  • Sanitization: Provides strong warnings for the sql.raw and sql.unsafe methods, emphasizing that they bypass standard injection protections and should only be used for trusted constants.\n- [DYNAMIC_EXECUTION]: Employs drizzle-kit to dynamically generate SQL migration files based on TypeScript schema definitions. This is a standard and documented workflow for maintaining database schema versioning.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 03:52 AM
Security Audit — agent-trust-hub — netlify-database