sqlalchemy

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses environment variables (os.environ["DATABASE_URL"]) for database credentials, which is a standard security best practice to avoid hardcoding sensitive information.
  • [SAFE]: The guidelines explicitly warn against using f-strings for SQL queries and instead promote safe parameter binding techniques through SQLAlchemy's expression language.
  • [SAFE]: In the search_tasks function, the use of autoescape=True with the icontains operator correctly sanitizes user-provided input to prevent manipulation of SQL LIKE patterns.
  • [SAFE]: The dependencies (sqlalchemy, asyncpg, alembic) are official and reputable packages within the Python ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 07:25 PM