turso-drizzle

Fail

Audited by Gen Agent Trust Hub on Sep 8, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the Turso CLI installation script from https://get.tur.so/install.sh using curl. This is the official and well-known installation method for Turso.
  • [REMOTE_CODE_EXECUTION]: The installation command curl -sSfL https://get.tur.so/install.sh | bash pipes a remote script directly into the shell for execution. While standard for this tool, it represents a remote execution pattern.
  • [COMMAND_EXECUTION]: Executes various database management commands via the turso CLI and migration commands via npx drizzle-kit (e.g., turso db create, npx drizzle-kit migrate).
Recommendations
  • HIGH: Downloads and executes remote code from: https://get.tur.so/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Sep 8, 2026, 05:54 PM
Security Audit — agent-trust-hub — turso-drizzle