prisma-migration-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes scripts and testing code that utilize shell commands to interact with the Prisma CLI.
- The bash script
scripts/preview-migration.shusesnpx prismaandcatto manage and display migration files. - The test file
tests/migrations/split-name.test.tsuseschild_process.execSyncto run database migrations as part of the test lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill functions as an assistant that interprets user-provided database schemas and migration names to generate SQL and execute management commands.
- Ingestion points: User-defined Prisma schemas and migration names in SKILL.md.
- Boundary markers: Standard markdown code blocks are used for isolation.
- Capability inventory: Ability to execute shell commands via
npxand Node.jsexecSyncfor database management. - Sanitization: The provided utility script
scripts/preview-migration.shinterpolates a command-line argument directly into a file path, which is a standard pattern for local developer tools.
Audit Metadata