prisma-migration-assistant

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes scripts and testing code that utilize shell commands to interact with the Prisma CLI.
  • The bash script scripts/preview-migration.sh uses npx prisma and cat to manage and display migration files.
  • The test file tests/migrations/split-name.test.ts uses child_process.execSync to run database migrations as part of the test lifecycle.
  • [INDIRECT_PROMPT_INJECTION]: The skill functions as an assistant that interprets user-provided database schemas and migration names to generate SQL and execute management commands.
  • Ingestion points: User-defined Prisma schemas and migration names in SKILL.md.
  • Boundary markers: Standard markdown code blocks are used for isolation.
  • Capability inventory: Ability to execute shell commands via npx and Node.js execSync for database management.
  • Sanitization: The provided utility script scripts/preview-migration.sh interpolates a command-line argument directly into a file path, which is a standard pattern for local developer tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 09:30 AM
Security Audit — agent-trust-hub — prisma-migration-assistant