prisma
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Prisma packages (such as
prisma,@prisma/client, and various database adapters) and standard development dependencies likedotenv,tsx, andjest-mock-extendedfrom the npm registry. These are expected and necessary for the skill's primary purpose. - [COMMAND_EXECUTION]: The instructions involve executing standard CLI commands using
npmandnpxto initialize the project, manage database migrations, and generate the Prisma Client. These operations are routine for a development-focused skill. - [CREDENTIALS_UNSAFE]: The documentation includes a hardcoded connection string (
postgresql://prisma:prisma@localhost:5433/tests) within the integration testing reference. This is clearly presented as a configuration example for a local Docker-based test environment and does not pose a security risk to the user's environment. - [SAFE]: The skill demonstrates a strong security posture by explicitly teaching users how to avoid SQL injection through the use of tagged template literals and parameterized queries when performing raw SQL operations.
Audit Metadata