alembic

Pass

Audited by Gen Agent Trust Hub on Mar 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides documentation and code snippets for Alembic, a standard database migration tool. No security issues were detected.
  • [COMMAND_EXECUTION]: The skill documents the configuration of Alembic's "post-write hooks" feature, which allows executing external tools like ruff or black on generated migration files. This is a standard and intended feature of the tool used for code formatting.
  • [EXTERNAL_DOWNLOADS]: The skill references community-standard third-party extensions such as alembic-utils and alembic-postgresql-enum to extend migration capabilities.
  • [CREDENTIALS_UNSAFE]: The skill explicitly warns against hardcoding credentials in configuration files and provides best-practice examples for reading connection strings from environment variables via os.environ.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 15, 2026, 11:43 AM