skills/fellipeutaka/leon/prisma/Gen Agent Trust Hub

prisma

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of official Prisma packages (such as prisma, @prisma/client, and various database adapters) and standard development dependencies like dotenv, tsx, and jest-mock-extended from the npm registry. These are expected and necessary for the skill's primary purpose.
  • [COMMAND_EXECUTION]: The instructions involve executing standard CLI commands using npm and npx to initialize the project, manage database migrations, and generate the Prisma Client. These operations are routine for a development-focused skill.
  • [CREDENTIALS_UNSAFE]: The documentation includes a hardcoded connection string (postgresql://prisma:prisma@localhost:5433/tests) within the integration testing reference. This is clearly presented as a configuration example for a local Docker-based test environment and does not pose a security risk to the user's environment.
  • [SAFE]: The skill demonstrates a strong security posture by explicitly teaching users how to avoid SQL injection through the use of tagged template literals and parameterized queries when performing raw SQL operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 09:02 AM