sqlmodel
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities were detected in the skill instructions or reference files.
- [EXTERNAL_DOWNLOADS]: The skill documentation includes standard installation commands for the
sqlmodellibrary and database drivers likepsycopg2-binaryandpymysql. These are widely used, legitimate packages in the Python ecosystem. - [COMMAND_EXECUTION]: The skill provides example shell commands for environment setup and package installation which are benign and consistent with its purpose as a technical guide.
- [DATA_EXFILTRATION]: Database connection strings in the documentation use local files (SQLite) or obvious placeholders (
user:pass@host/db) for demonstration purposes, posing no risk to sensitive credentials or non-whitelisted exfiltration. - [INDIRECT_PROMPT_INJECTION]: The provided FastAPI patterns demonstrate the use of Pydantic models and SQLModel for input validation and database interactions. This architecture naturally follows best practices for sanitizing data and preventing common injection attacks.
Audit Metadata