Skills drizzle-orm-patterns
📦
drizzle-orm-patterns
Content revision r1 Safe ⚙️ External commands📁 Filesystem access🔑 Env variables⚡ Contains scripts🌐 Network access
Build Type-Safe Drizzle ORM Apps
Database code often loses type safety when projects add migrations, relations, and raw SQL. This skill gives Claude and Codex practical Drizzle ORM patterns for PostgreSQL and edge deployments.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "drizzle-orm-patterns" from https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns.md and its manifest at https://skillstore.io/api/skills/barnhardt-enterprises-inc-drizzle-orm-patterns/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "drizzle-orm-patterns". Design a Drizzle schema for posts, authors, and comments.
Expected outcome:
- A normalized table plan with primary keys and foreign keys.
- Relation guidance for author to posts and post to comments.
- Type inference notes for inserts and query results.
Using "drizzle-orm-patterns". Review this migration that adds a required profile field.
Expected outcome:
- A staged migration sequence.
- Backfill and verification steps.
- Warnings about locks, defaults, and rollback limits.
Using "drizzle-orm-patterns". Find performance problems in these Drizzle queries.
Expected outcome:
- A list of likely N+1 and over-select patterns.
- Suggested joins, projections, and index changes.
- Notes on when caching or batching is appropriate.
Security Audit
Safev10 • 7/9/2026 Open versioned report
The static analyzer produced many high-severity hits, but the reviewed evidence is documentation, ORM examples, or validator pattern strings rather than executable malicious behavior. No prompt injection, credential exfiltration, destructive automation, or covert network behavior was found in the provided static evidence.
11
Files scanned
8,193
Lines analyzed
0
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (50)
common-mistakes.md:26-31 common-mistakes.md:47-50 common-mistakes.md:58-60 common-mistakes.md:93-94 common-mistakes.md:108-119 common-mistakes.md:119-120 common-mistakes.md:138-142 common-mistakes.md:177-181 common-mistakes.md:676-693 edge-runtime.md:599-609 edge-runtime.md:609-613 migrations.md:276-284 migrations.md:288-290 migrations.md:310-317 migrations.md:323-325 migrations.md:360-363 migrations.md:391-403 migrations.md:419-428 migrations.md:428-431 migrations.md:431-432 migrations.md:490-493 migrations.md:496-503 migrations.md:507-510 migrations.md:512-514 migrations.md:532-539 migrations.md:543-547 migrations.md:665-666 migrations.md:689-690 migrations.md:711-712 migrations.md:765-766 migrations.md:781-786 migrations.md:803-804 performance.md:125-138 performance.md:252-255 performance.md:272-282 performance.md:282-284 performance.md:302-307 performance.md:348-352 performance.md:366-368 performance.md:379-386 performance.md:386-388 performance.md:454-460 performance.md:569-582 performance.md:582-595 performance.md:595-597 performance.md:645-654 performance.md:670-675 performance.md:734-737 performance.md:739-742 performance.md:750-753
📁 Filesystem access (7)
🔑 Env variables (50)
edge-runtime.md:44 edge-runtime.md:51 edge-runtime.md:124 edge-runtime.md:147 edge-runtime.md:177 edge-runtime.md:189 edge-runtime.md:194 edge-runtime.md:44 edge-runtime.md:51 edge-runtime.md:124 edge-runtime.md:147 edge-runtime.md:177 edge-runtime.md:189 edge-runtime.md:194 edge-runtime.md:44 edge-runtime.md:51 edge-runtime.md:124 edge-runtime.md:147 edge-runtime.md:155 edge-runtime.md:177 edge-runtime.md:189 edge-runtime.md:194 migrations.md:30 migrations.md:63 migrations.md:268 migrations.md:280 migrations.md:299 migrations.md:314 migrations.md:335 migrations.md:484 migrations.md:500 migrations.md:30 migrations.md:63 migrations.md:268 migrations.md:280 migrations.md:299 migrations.md:314 migrations.md:335 migrations.md:484 migrations.md:500 migrations.md:30 migrations.md:63 migrations.md:268 migrations.md:280 migrations.md:299 migrations.md:314 migrations.md:335 migrations.md:484 migrations.md:500 performance.md:474
⚡ Contains scripts (7)
No confirmed security findings were detected by the latest completed static and semantic audit. This does not prove the skill has no side effects.
Audited by: claude View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns/audits/10?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/barnhardt-enterprises-inc-drizzle-orm-patterns/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/barnhardt-enterprises-inc-drizzle-orm-patterns.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
Barnhardt-Enterprises-Inc. (2026). drizzle-orm-patterns security audit report (audit version 10) [Author version unspecified]. Skillstore. https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns/audits/10BibTeX citation
@techreport{barnhardt-enterprises-inc-barnhardt-enterprises-inc-drizzle-orm-patterns-2026,
author = {Barnhardt-Enterprises-Inc},
title = {drizzle-orm-patterns security audit report (audit version 10)},
institution = {Skillstore},
year = {2026},
number = {10},
url = {https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns/audits/10},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "drizzle-orm-patterns security audit report (audit version 10)"
version: "unspecified"
type: report
authors:
- name: "Barnhardt-Enterprises-Inc"
date-released: "2026-07-09"
url: "https://skillstore.io/skills/barnhardt-enterprises-inc-drizzle-orm-patterns/audits/10"
identifiers:
- type: other
value: "skillstore:barnhardt-enterprises-inc-drizzle-orm-patterns:audit:10"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
70
Community
83
Spec Compliance
What You Can Build
Create a Drizzle schema
Design tables, relations, indexes, and inferred TypeScript types for a PostgreSQL feature.
Review a migration plan
Check schema changes, backfills, and rollback steps before applying them to production.
Improve query performance
Refactor slow Drizzle queries with selected fields, joins, batching, indexes, and caching guidance.
Try These Prompts
Start a Drizzle schema
Use the drizzle-orm-patterns skill to design a PostgreSQL Drizzle schema for users, organizations, and memberships. Include relations and inferred insert and select types.
Fix a query safely
Use the drizzle-orm-patterns skill to rewrite this Drizzle query so it avoids unsafe raw SQL, selects only needed fields, and keeps TypeScript inference clear.
Plan a migration
Use the drizzle-orm-patterns skill to plan a zero-downtime migration that adds a non-null column, backfills existing rows, and includes verification steps.
Audit database access patterns
Use the drizzle-orm-patterns skill to audit my Drizzle data layer for N+1 queries, unsafe SQL templates, transaction issues, and edge runtime compatibility.
Best Practices
- Prefer Drizzle query builders and placeholders before raw SQL fragments.
- Run migration plans in stages when changing existing production data.
- Select only required columns and verify indexes for frequent filters.
Avoid
- Do not paste real database URLs or Redis tokens into prompts or examples.
- Do not use raw SQL interpolation for untrusted values.
- Do not run generated migrations against production without review and backup planning.
Frequently Asked Questions
What does this skill help with?
It helps Claude, Codex, and Claude Code produce safer Drizzle ORM schemas, queries, migrations, and performance reviews.
Does it support databases other than PostgreSQL?
The guidance is centered on PostgreSQL. Some Drizzle concepts may transfer, but examples may need changes.
Can it run migrations for me?
No. It can plan and review migration steps, but users must run database commands in their own environment.
Is it safe to include production secrets?
No. Use placeholder values and never paste real database URLs, tokens, or credentials into prompts.
What tools can use this skill?
The report lists compatibility with Claude, Codex, and Claude Code.
Can the validator catch every unsafe query?
No. It checks common patterns, but human review and tests are still needed for security and correctness.
Developer Details
Author
Barnhardt-Enterprises-IncLicense
MIT
Skillstore revision
r1
Version notice
The author did not declare a version.
Ref
7db9b9f06e0ab79c575b58bc48c4d8dc9849f424
Maintenance freshness
7/18/2026
Usage
6 downloads · 222 views
File structure