prisma-cli-studio
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
prismaand@prisma/clientpackages from the official NPM registry. These are verified resources from a well-known organization and do not pose a security risk. - [COMMAND_EXECUTION]: The skill executes the
prisma studiocommand to launch the database management interface. This is the intended and documented primary function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external database records. If a database field contains malicious instructions, it could influence the agent's behavior during a session. This is an inherent risk of any data-processing tool and is classified as low severity.
Audit Metadata