sqlalchemy
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses environment variables (
os.environ["DATABASE_URL"]) for database credentials, which is a standard security best practice to avoid hardcoding sensitive information. - [SAFE]: The guidelines explicitly warn against using f-strings for SQL queries and instead promote safe parameter binding techniques through SQLAlchemy's expression language.
- [SAFE]: In the
search_tasksfunction, the use ofautoescape=Truewith theicontainsoperator correctly sanitizes user-provided input to prevent manipulation of SQL LIKE patterns. - [SAFE]: The dependencies (
sqlalchemy,asyncpg,alembic) are official and reputable packages within the Python ecosystem.
Audit Metadata