database-schema-designer
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and uses several third-party libraries and tools from the npm registry, including @faker-js/faker, drizzle-orm, and @paralleldrive/cuid2 for its schema and seed examples.
- [COMMAND_EXECUTION]: The instructions include the use of npx commands (such as npx prisma-erd-generator and npx @dbml/cli) to execute external utilities for database visualization and schema conversion.
- [PROMPT_INJECTION]: The skill processes natural language database requirements to generate structured schemas. While this presents an indirect prompt injection surface (Category 8), the skill focuses on technical translation of entities and relationships with no evidence of malicious instructions or behavior overriding.
Audit Metadata