sqlmodel

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or reference files.
  • [EXTERNAL_DOWNLOADS]: The skill documentation includes standard installation commands for the sqlmodel library and database drivers like psycopg2-binary and pymysql. These are widely used, legitimate packages in the Python ecosystem.
  • [COMMAND_EXECUTION]: The skill provides example shell commands for environment setup and package installation which are benign and consistent with its purpose as a technical guide.
  • [DATA_EXFILTRATION]: Database connection strings in the documentation use local files (SQLite) or obvious placeholders (user:pass@host/db) for demonstration purposes, posing no risk to sensitive credentials or non-whitelisted exfiltration.
  • [INDIRECT_PROMPT_INJECTION]: The provided FastAPI patterns demonstrate the use of Pydantic models and SQLModel for input validation and database interactions. This architecture naturally follows best practices for sanitizing data and preventing common injection attacks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 08:18 PM