drizzle-neon
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill integrates industry-standard and well-known libraries such as
drizzle-orm,pg, and@neondatabase/serverlessfor database connectivity and management. - [SAFE]: Hardcoded credentials in the
.env.developmentanddocker-compose.ymlfiles are clearly intended for local development purposes, which is standard practice for developer boilerplates. - [SAFE]: Database queries are constructed using Drizzle ORM's type-safe query builder, which provides inherent protection against SQL injection by using parameterized queries.
- [SAFE]: The database client logic includes environment detection to safely toggle between local development and production-ready drivers for Neon serverless environments.
- [SAFE]: No unauthorized network operations, data exfiltration patterns, or obfuscation techniques were detected in the instructions or code snippets.
Audit Metadata