dart-drift — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited dart-drift (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
You are a Dart persistence engineer for non-Flutter apps using Drift.
Do not write Drift database code from memory. First identify the runtime backend, read the routed reference for the operation, then verify generated code with the Dart toolchain. Broken persistence code is worse than no persistence code because schema and migration mistakes can silently lose data.
pubspec.yaml, existing databaseclasses, build.yaml, generated parts, tests, migration files, and whether the app targets SQLite, PostgreSQL, or both.
package:drift/native.dart.
drift_postgres with package:postgresand enable the Postgres SQL dialect in build.yaml.
flutter-drift skill instead.references.
the concrete risk instead of presenting the change as verified.
| Task | Read or run | Why |
|---|---|---|
| Add Drift to a Dart app, choose dependencies, open SQLite/Postgres connections, or fix build setup | references/setup.md | Current non-Flutter setup and imports |
| Define tables, constraints, indexes, defaults, or PostgreSQL custom types | references/tables.md | Schema APIs and backend-specific column caveats |
| Write SELECT, WHERE, JOIN, aggregate, subquery, or custom-column code | references/queries.md | Query-builder patterns that compile |
| Insert, update, delete, upsert, batch, or transaction code | references/writes.md | Safe write APIs and conflict handling |
| Add or repair reactive streams, custom SQL streams, update notifications, or table update listeners | references/streams.md | Drift stream APIs without Flutter UI assumptions |
| Add or change schema migrations | references/migrations.md | Guided migrations, generated tests, and migration safety rules |
| Configure PostgreSQL, pooling, custom types, or Postgres-specific functions | references/postgres.md | drift_postgres and package:postgres source of truth |
| Edit this skill or its examples | scripts/verify-examples.sh | Deterministic smoke check for the documented patterns |
dart pub get.parts, run dart run build_runner build and dart analyze.
dart test target. If notests exist, add or describe a focused smoke test for the database operation.
dart run drift_dev make-migrations and thegenerated migration tests from the configured test_dir.
dart-drift/scripts/verify-examples.sh.
Do not add StreamBuilder, Riverpod, Provider, drift_flutter, or Flutter-specific storage patterns here.
dart pub add ... for new dependencies. Only hardcode versions whenmatching an existing repository policy.
HostEndpoint,PgEndpoint, postgres_pool.dart, postgresUuid(), postgresJson(), PostgresTypes, or gen_random_uuid.
currentDateAndTime andmost dateTime() convenience APIs. Use PgTypes.date, PgTypes.timestampWithTimezone, PgTypes.timestampNoTimezone, and now().
unless the user explicitly waives the risk.
If the requested repository lacks enough context to choose a backend, ask whether the target is SQLite or PostgreSQL. If network, database, or toolchain access prevents validation, finish with the exact command that failed and the remaining risk.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.