prisma-cli-deploy-nextjs
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes npx prisma-cli or pnpm dlx @prisma/cli to fetch and execute the Prisma CLI tool from the public registry.
- [COMMAND_EXECUTION]: The skill executes various prisma-cli subcommands to manage authentication, link projects, and trigger application deployments.
- [DATA_EXFILTRATION]: The instructions incorporate explicit security constraints to prevent the leakage of credentials, specifically instructing the agent not to print .env contents or authentication tokens like PRISMA_SERVICE_TOKEN in the chat.
- [PROMPT_INJECTION]: The skill evaluates project files for configuration purposes, representing an indirect prompt injection surface. Ingestion points: package.json, next.config.js, next.config.mjs, next.config.cjs, next.config.ts. Boundary markers: Not present. Capability inventory: Subprocess execution via prisma-cli and file system writes to update Next.js configurations. Sanitization: Not present.
Audit Metadata