prisma-postgres
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documents the use of
npx create-db@latestand its aliases (create-pg,create-postgres) for instant database provisioning. These commands download and execute the latest version of the Prismacreate-dbtool from the npm registry. As this is an official tool provided by the vendor, this behavior is expected for the skill's purpose.\n- [COMMAND_EXECUTION]: The skill utilizes several CLI commands for project management, includingprisma postgres linkfor connecting local environments to remote databases andnpx prisma studiofor local data inspection.\n- [EXTERNAL_DOWNLOADS]: The skill guides users to install several official Node.js packages, including@prisma/management-api-sdk,create-db, and specific database adapters like@prisma/adapter-pg. Additionally, it references official Prisma domains for API access (api.prisma.io), authentication (auth.prisma.io), and the management console (console.prisma.io).
Audit Metadata