The Agent Skills Directory

[SAFE]: No malicious patterns or security vulnerabilities were detected in the analyzed files. The skill serves as a best-practice guide for database interactions.
[DATA_EXPOSURE_AND_EXFILTRATION]: The skill correctly demonstrates using environment variables (DATABASE_URL) for database connection strings, avoiding hardcoded credentials. It also encourages selecting only necessary columns instead of using select("*") in production queries.
[COMMAND_EXECUTION]: The skill documents standard Knex CLI commands (e.g., migrate:make, migrate:latest) for database management. These are used appropriately within the context of development and deployment workflows.
[DYNAMIC_EXECUTION]: Although the skill is centered around building SQL queries dynamically, it explicitly mandates the use of parameterized bindings (? for values and ?? for identifiers) to eliminate SQL injection risks. It also includes warnings and "Bad Example" sections to educate the user on the dangers of string interpolation in raw SQL queries.
[INDIRECT_PROMPT_INJECTION]: The skill acknowledges the risk of processing untrusted data and provides clear mitigation strategies through its "Critical Requirements" and "Red Flags" sections, specifically enforcing parameterized input handling.

api-database-knex