fullstack-schema-sync
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for using command-line tools such as Prisma, GraphQL Codegen, and OpenAPI-TypeScript to synchronize database schemas with application code.
- [DYNAMIC_EXECUTION]: The skill facilitates source code generation from schema definitions, which is a standard industry practice for maintaining type safety in fullstack applications.
- [INDIRECT_PROMPT_INJECTION]: The skill describes workflows that ingest data from local schema files and internal API endpoints. Evidence Chain: 1. Ingestion points: Reads schema.prisma, openapi.yaml, schema.graphql, and localhost API endpoints (SKILL.md). 2. Boundary markers: Not applicable as the output is generated source code. 3. Capability inventory: Execution of CLI tools and file system writes. 4. Sanitization: Relies on the security of established development tools.
Audit Metadata