The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes several maintenance and upgrade scripts located in the upgrading/ directory. These scripts use child_process.execSync and execFile to perform project maintenance tasks such as:
Listing project files via git ls-files (e.g., in uuid-preset-rename.ts).
Executing Prisma CLI commands and package manager tasks via pnpm emit or pnpm exec prisma-next (e.g., in re-emit-closed-mongo-contracts.ts).
These operations are standard for development tooling and are scoped to the user's project directory.
[INDIRECT_PROMPT_INJECTION]: The skill defines workflows for processing external data that could potentially contain malicious instructions, specifically:
references/debug.md instructs the agent to process pasted error envelopes and machine-readable CLI output.
references/feedback.md guides the agent in creating GitHub issues from user-provided descriptions.
The risk is mitigated by explicit instructions to redact sensitive data and the fact that input is used to generate documentation/issues rather than executable logic.
[DYNAMIC_EXECUTION]: The upgrade instructions frequently require the agent or user to execute local TypeScript scripts using tsx (e.g., pnpm exec tsx ./strip-migration-labels-hints.ts). These scripts are part of the skill's distribution and are used to perform complex string replacements (codemods) that cannot be handled by simple regex.
[EXTERNAL_DOWNLOADS]: The documentation references standard installations from the official Prisma npm scope and GitHub repositories:
pnpm add -D @internal/vite-plugin-contract-emit in references/build.md.
pnpm dlx @prisma/cli@next orm init in references/quickstart.md.
These point to well-known vendor resources from the prisma organization.

prisma-8