prisma
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the install path is mostly legitimate, but the skill's stated Prisma purpose is implemented by sending authentication, queries, and database interactions through Membrane as a third-party intermediary instead of direct Prisma tooling. The footprint is somewhat disproportionate to a simple Prisma integration, creating medium data-flow and trust risk rather than clear malware.
Confidence: 83%Severity: 56%
Audit Metadata