api-database-edgedb
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation refers to official Node.js packages gel, @gel/generate, edgedb, and @edgedb/generate. These are standard libraries for interacting with Gel (formerly EdgeDB) and are treated as safe vendor resources.
- [DYNAMIC_EXECUTION]: The skill instructs the use of npx @gel/generate edgeql-js to generate a TypeScript query builder. This tool introspects the database schema to create type-safe code, which is a standard development practice for this technology.
- [COMMAND_EXECUTION]: Documents standard CLI commands for project initialization, instance management, and migration workflows (e.g., gel migrate, gel migration create), which are expected for database administration tasks.
- [INDIRECT_PROMPT_INJECTION]: The documentation identifies potential injection risks when processing database queries and mitigates them by promoting the use of type-annotated parameters and the generated query builder instead of unsafe string interpolation.
- [CREDENTIALS_UNSAFE]: The skill emphasizes secure secret management, recommending the use of environment variables for connection strings and passwords while explicitly warning against hardcoding credentials in source code.
Audit Metadata