Skills Database & ORM
📦

Database & ORM

Content revision r3 Safe ⚙️ External commands🔑 Env variables

Connect Neon Postgres with Drizzle ORM

Database setup can be difficult when connection, schema, and migration steps are unclear. This skill provides a focused reference for Neon Postgres and Drizzle ORM workflows.

Supports: Claude Codex Code(CC)
📊 75 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "Database & ORM" from https://skillstore.io/skills/abdulsamad94-database-orm.md and its manifest at https://skillstore.io/api/skills/abdulsamad94-database-orm/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/abdulsamad94-database-orm.md Signed manifest GET /api/skills/abdulsamad94-database-orm/manifest Signed lockfile GET /api/skills/abdulsamad94-database-orm/lockfile

Test it

Using "Database & ORM". How does this skill connect to Neon?

Expected outcome:

  • It uses the Neon serverless driver.
  • It reads DATABASE_URL to create a SQL client.
  • It passes that client to Drizzle ORM.

Using "Database & ORM". What migration commands are documented?

Expected outcome:

  • Generate migrations with Drizzle Kit.
  • Apply changes with the documented push command or a project migration script.
  • Review generated changes before applying them to a production database.

Security Audit

Safe
v16 • 7/18/2026 Open versioned report

All 14 static findings are false positives. Markdown inline code and fenced TypeScript examples were misidentified as shell execution, while DATABASE_URL is used only to configure the Neon driver. No command execution, environment-file reading, credential disclosure, or prompt-injection intent was found.

1
Files scanned
47
Lines analyzed
0
Review items
0
False positives ignored

Risk Factors

⚙️ External commands (10)
SKILL.md:11 SKILL.md:14 SKILL.md:16-22 SKILL.md:22-25 SKILL.md:25-26 SKILL.md:26 SKILL.md:27 SKILL.md:32-42 SKILL.md:42-45 SKILL.md:45-46
🔑 Env variables (3)
SKILL.md:20 SKILL.md:20 SKILL.md:20
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: claude View Audit History →
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/abdulsamad94-database-orm/audits/16?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/abdulsamad94-database-orm/security.svg)](https://skillstore.io/skills/abdulsamad94-database-orm?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/abdulsamad94-database-orm?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/abdulsamad94-database-orm/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/abdulsamad94-database-orm.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA · BibTeX · CFF)

APA citation

AbdulSamad94. (2026). Database & ORM security audit report (audit version 16) [Author version unspecified]. Skillstore. https://skillstore.io/skills/abdulsamad94-database-orm/audits/16

BibTeX citation

@techreport{abdulsamad94-abdulsamad94-database-orm-2026, author = {AbdulSamad94}, title = {Database & ORM security audit report (audit version 16)}, institution = {Skillstore}, year = {2026}, number = {16}, url = {https://skillstore.io/skills/abdulsamad94-database-orm/audits/16}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "Database & ORM security audit report (audit version 16)" version: "unspecified" type: report authors: - name: "AbdulSamad94" date-released: "2026-07-18" url: "https://skillstore.io/skills/abdulsamad94-database-orm/audits/16" identifiers: - type: other value: "skillstore:abdulsamad94-database-orm:audit:16" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: High
55
Architecture
85
Maintainability
85
Content
70
Community
65
Spec Compliance

What You Can Build

Set up a Neon connection

Review the documented driver and environment-variable pattern before configuring a TypeScript service.

Review a Drizzle data layer

Use the file layout and query examples to compare an existing project with the expected ORM structure.

Prepare database migrations

Identify the documented Drizzle Kit commands for generating and applying schema changes.

Try These Prompts

Understand the stack 
Explain the Neon Postgres and Drizzle ORM stack described by this skill in simple steps.
Configure a connection 
Show how the skill connects Drizzle ORM to Neon using DATABASE_URL, and explain each imported package.
Plan a schema update 
Use this skill to outline a safe workflow for changing a Drizzle schema and preparing a migration.
Review database operations 
Compare my proposed Drizzle select and insert operations with the patterns documented in this skill. Identify missing validation or authorization concerns.

Best Practices

  • Store DATABASE_URL in the deployment environment and never commit it to source control.
  • Review generated migrations before applying them to shared or production databases.
  • Add authorization and input validation around application queries.

Avoid

  • Do not hardcode database credentials in source files or prompts.
  • Do not apply schema pushes to production without review and backups.
  • Do not treat the example queries as complete authorization controls.

Frequently Asked Questions

Which database does this skill cover?
It covers Neon, a serverless Postgres database.
Which ORM does it use?
It uses Drizzle ORM with the Neon HTTP driver.
Where does the connection string come from?
The example reads DATABASE_URL from the runtime environment.
Does the skill run migrations automatically?
No. It documents Drizzle Kit commands but does not execute them.
What queries are included?
It includes simple select and insert examples.
Does it secure application data access?
No. You must add authorization, validation, and operational safeguards in your application.

Developer Details

License

MIT

Skillstore revision

r3

Version notice

The author did not declare a version.

Repository

https://github.com/AbdulSamad94/Hackhaton-SpecsKitPlus/tree/master/.claude/skills/database

Ref

80999bf530a7874d7bedf8ce202001ecb4c4f5e0

Maintenance freshness

7/19/2026

Usage

8 downloads · 189 views

File structure

📄 SKILL.md