The Agent Skills Directory

[PROMPT_INJECTION]: The SKILL.md file contains instructions that explicitly command the AI agent to treat the skill's content and reference files as the absolute 'source of truth' over its own training data. This pattern is often used to override safety guidelines or standard behaviors, although here it is used in a technical documentation context.
[INDIRECT_PROMPT_INJECTION]: The skill possesses a significant attack surface for indirect injection:
Ingestion points: The agent is instructed to read and process multiple untrusted local files including prisma.config.ts, contract.prisma, and migration.json (found in SKILL.md).
Capability inventory: The skill includes numerous scripts that perform file system writes and execute shell commands (e.g., upgrading/app/upgrades/0.11-to-0.12/re-emit-closed-mongo-contracts.ts executes pnpm emit).
Boundary markers: Explicit delimiters or 'ignore embedded instructions' warnings are largely absent from the authoring instructions.
Sanitization: While references/feedback.md includes instructions for the agent to redact secrets like DATABASE_URL before filing GitHub issues, the overall process relies on the agent's ability to correctly interpret and execute these safeguards.
[DYNAMIC_EXECUTION]: Multiple upgrade and migration scripts included with the skill use dynamic execution techniques to maintain the project state:
upgrading/app/upgrades/0.11-to-0.12/re-emit-closed-mongo-contracts.ts uses node:child_process (execFile) to run project-specific scripts like pnpm emit.
upgrading/extension/upgrades/0.13-to-0.14/migration-op-factories-to-methods.ts uses execSync to run git ls-files to identify target files for modification.
[EXTERNAL_DOWNLOADS]: The skill references several external resources and commands that involve network activity:
SKILL.md mentions prisma skills sync, which is a command that fetches and updates skill definitions from remote sources.
references/feedback.md provides workflows for using the gh (GitHub) CLI tool to create issues on the prisma/prisma repository.

prisma-8