turso-drizzle
Fail
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the Turso CLI installation script from
https://get.tur.so/install.shusingcurl. This is the official and well-known installation method for Turso. - [REMOTE_CODE_EXECUTION]: The installation command
curl -sSfL https://get.tur.so/install.sh | bashpipes a remote script directly into the shell for execution. While standard for this tool, it represents a remote execution pattern. - [COMMAND_EXECUTION]: Executes various database management commands via the
tursoCLI and migration commands vianpx drizzle-kit(e.g.,turso db create,npx drizzle-kit migrate).
Recommendations
- HIGH: Downloads and executes remote code from: https://get.tur.so/install.sh - DO NOT USE without thorough review
Audit Metadata