The Agent Skills Directory

[SAFE]: The skill provides technical documentation, SQL migration templates, and TypeScript code for database management. No malicious patterns such as prompt injection, data exfiltration, or unauthorized command execution were detected.
[CREDENTIALS_SAFE]: The configuration templates (e.g., templates/drizzle.config.ts) correctly use environment variables (process.env.*) for sensitive data like CLOUDFLARE_D1_TOKEN. The documentation explicitly warns against committing credentials to version control and recommends using .env files with .gitignore.
[EXTERNAL_DOWNLOADS]: The skill references standard, well-known libraries in the Cloudflare/Drizzle ecosystem (drizzle-orm, drizzle-kit, hono, wrangler). It also includes a section on 'Secure Installation' that advises users to block post-install scripts and audit packages using tools like Socket, which are proactive security measures.
[COMMAND_EXECUTION]: The provided utility script (scripts/check-versions.sh) is a benign shell script that uses npm list and npm view to inform the user about package versions and updates. It does not perform any destructive operations or network exfiltration.

drizzle-orm-d1