skills/ngxtm/devkit/prisma-expert/Gen Agent Trust Hub

prisma-expert

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes local shell commands and the Prisma CLI to inspect the environment and manage database states. This includes checking versions, searching schema files, and listing migration directories. Evidence: npx prisma --version, grep "provider" prisma/schema.prisma, ls -la prisma/migrations/, and psql.
  • [EXTERNAL_DOWNLOADS]: The skill references official Prisma documentation and utilizes npx, which may download the Prisma CLI from the public npm registry if not already present. Evidence: https://www.prisma.io/docs/ and npx prisma.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it processes user-provided schema files.
  • Ingestion points: prisma/schema.prisma (via grep and CLI validation).
  • Boundary markers: Absent.
  • Capability inventory: Shell command execution via npx, grep, ls, and psql.
  • Sanitization: The skill relies on the Prisma CLI's internal validation of the schema file structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 01:48 AM
Security Audit — agent-trust-hub — prisma-expert