prisma-schema-helper
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided Prisma schemas and backend configurations, which are external, untrusted data sources.
- Ingestion points: Processes user requests and schema definitions provided during interaction (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potentially malicious commands embedded within the data it processes.
- Capability inventory: The skill's environment is configured with access to tools including Bash, Read, Write, and Edit, creating a capability tier that could be targeted by injected instructions.
- Sanitization: There are no specific steps mentioned to sanitize or validate the content of processed schemas before the agent acts upon them.
Audit Metadata