netlify-database
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Documents the use of the
netlifyCLI and standard database tools likepg_dumpandpg_restore. These are utilized for legitimate project initialization, local development, and database migration tasks. The skill correctly advises piping these commands directly or using gitignored directories to avoid exposing production data in source control.\n- [EXTERNAL_DOWNLOADS]: Fetches and installs packages from trusted organizations, specifically@netlifyanddrizzle-orm. These dependencies are standard for managing Netlify Database and SQL ORM functionality.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages database queries and schema migrations, which present a surface for processing untrusted data.\n - Ingestion points: Site schema definitions in
db/schema.tsand SQL migration files innetlify/database/migrations/.\n - Boundary markers: Includes Netlify-specific house rules that restrict the agent to documented surfaces and explicitly warn against using unparameterized SQL functions with user input.\n
- Capability inventory: Utilizes CLI commands for database connectivity (
netlify database connect) and DDL application via migrations.\n - Sanitization: Provides strong warnings for the
sql.rawandsql.unsafemethods, emphasizing that they bypass standard injection protections and should only be used for trusted constants.\n- [DYNAMIC_EXECUTION]: Employsdrizzle-kitto dynamically generate SQL migration files based on TypeScript schema definitions. This is a standard and documented workflow for maintaining database schema versioning.
Audit Metadata