prisma-expert
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell commands including
npx prisma,grep, andlsto check the environment, validate schema files, and monitor migration status. - [EXTERNAL_DOWNLOADS]: The skill invokes
npx prisma, which will download the Prisma CLI package from the public npm registry if it is not already cached in the local environment. This is standard behavior for Node.js development workflows involving official tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data which serves as a potential vector for indirect instructions. 1. Ingestion points: Reads local schema content from
prisma/schema.prismaand directory listings fromprisma/migrations/. 2. Boundary markers: The skill does not employ specific delimiters or 'ignore' instructions to separate processed file data from its own instructional context. 3. Capability inventory: Shell command execution vianpx,grep, andls. 4. Sanitization: No content validation or filtering is performed on the ingested file data prior to processing.
Audit Metadata