drizzle-cli
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for executing
drizzle-kitCLI commands such asgenerate,migrate,push,check, andstudio. These are standard, legitimate operations for managing database schemas and migrations in development environments. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it is designed to process user-controlled database schema and migration files.
- Ingestion points: The skill processes Drizzle schema files and migration scripts typically found in a user's repository.
- Boundary markers: No specific delimiters or safety warnings for handling untrusted schema content are provided.
- Capability inventory: The skill uses the
drizzle-kittool to modify database structures and generate migration files based on input code. - Sanitization: No specific sanitization steps are documented; the skill assumes the schema files are trusted components of the project environment.
Audit Metadata