The Agent Skills Directory

[SAFE]: The skill provides standard documentation and code examples for Drizzle ORM. No malicious patterns, obfuscation, or unauthorized network operations were detected.
[DATA_EXPOSURE]: The skill references standard environment variables like DATABASE_URL and TURSO_AUTH_TOKEN. These are handled correctly via process.env rather than being hardcoded, which follows standard security practices.
[INDIRECT_PROMPT_INJECTION]: While the skill demonstrates handling untrusted FormData in a Next.js Server Action (an ingestion point for potential injection), it proactively includes a security warning. The documentation explicitly advises the user to validate data and handle authorization before performing database operations, mitigating the risk of accidental vulnerability introduction.
[COMMAND_EXECUTION]: The skill mentions standard developer CLI tools like drizzle-kit. These are used in the context of database migrations and local development, which is expected behavior for an ORM expert skill.

drizzle-orm-expert