tl-kysely-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference for type-safe database interactions and migration management using Kysely. All code patterns observed follow established security best practices.
- [COMMAND_EXECUTION]: The documentation references standard development CLI tools such as
kysely-ctlandkysely-codegen. These are industry-standard tools for database schema management and type generation. - [EXTERNAL_DOWNLOADS]: The skill mentions several community-standard packages and integrations, including official adapters for Auth.js, Fastify, and dialects for Cloudflare D1, Neon, and Supabase. These references are appropriate for the skill's purpose and target well-known, trusted platforms.
- [INDIRECT_PROMPT_INJECTION]: The skill identifies potential SQL injection surfaces associated with dynamic identifiers (
db.dynamic.ref) and raw SQL fragments (sql.raw). It provides mandatory security guidance, instructing users to validate inputs against allowlists and provide parameterized examples, effectively mitigating these risks.
Audit Metadata