database-development
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development guide for Drizzle ORM and database migrations. It contains standard bash commands for generating and running migrations using the project's defined scripts.
- [SAFE]: Includes security-positive instructions that explicitly prohibit the use of
sql.raw()in API source code to prevent SQL injection vulnerabilities. - [SAFE]: Mandates the use of runtime decoders (such as
.mapWith()and Zod schemas) to ensure data integrity and type safety between the PostgreSQL driver and the TypeScript application. - [SAFE]: Mentions the use of the Clerk API for data migrations, which is a legitimate and well-known service for authentication. The instruction to exclude historical migration scripts from CI is a standard maintenance practice to avoid build errors and does not constitute malicious concealment.
Audit Metadata