prisma

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the install path is mostly legitimate, but the skill's stated Prisma purpose is implemented by sending authentication, queries, and database interactions through Membrane as a third-party intermediary instead of direct Prisma tooling. The footprint is somewhat disproportionate to a simple Prisma integration, creating medium data-flow and trust risk rather than clear malware.

Confidence: 83%Severity: 56%
Audit Metadata
Analyzed At
Apr 28, 2026, 10:55 PM
Package URL
pkg:socket/skills-sh/membranedev%2Fapplication-skills%2Fprisma%2F@bd5c99a29dae7e817cd81eb614213fd7246a7989