prisma-postgres-upgrade
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of vendor-provided packages including
prisma@8.0.0-rc.27,@prisma/orm-postgres@8.0.0-rc.20, and supporting tools liketsxanddotenvfrom standard registries. It also describes using thenpx prisma skills synccommand to retrieve official skill definitions. - [COMMAND_EXECUTION]: The upgrade process requires executing several commands to manage the migration, including
npx prisma contract emit,npx prisma db sign, andnpx prisma migration plan. It also involves routine file management tasks like removing legacy migration directories (rm -r prisma/migrations) and running repository validation scripts (tsc,npm test). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process project-specific data such as
schema.prismafiles andpackage.jsonconfigurations. This is a standard requirement for the upgrade's purpose and does not involve risky patterns such as exfiltrating data to untrusted domains or executing unvalidated external instructions.
Audit Metadata