kysely-postgres
Facilitates type-safe PostgreSQL queries in Node.js/TypeScript using Kysely, enhancing database interaction and migration management.
Install this skill
Security score
The kysely-postgres skill was audited on Feb 12, 2026 and we found 8 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 125 | sql<string>`${eb.ref("first_name")} || ' ' || ${eb.ref("last_name")}`.as("full_name"), |
Template literal with variable interpolation in command context
| 432 | .where((eb) => eb(sql`${searchTerm}`, "=", eb.fn("any", [eb.ref("tags")]))) |
Template literal with variable interpolation in command context
| 493 | sql`jsonb_build_object('val', ${searchValue}::text)`, |
Template literal with variable interpolation in command context
| 508 | .$if(!!searchTerm, (qb) => qb.where("name", "like", `%${searchTerm}%`)) |
Template literal with variable interpolation in command context
| 563 | return sql<string>`lower(${expr})`; |
Template literal with variable interpolation in command context
| 886 | return sql`CAST(${JSON.stringify(value)} AS JSONB)`; |
Template literal with variable interpolation in command context
| 914 | return sql`CAST(${JSON.stringify(this.#value)} AS JSONB)`.toOperationNode(); |
Access to .env file
| 691 | connectionString: process.env.DATABASE_URL, |