prisma-postgres-upgrade

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill specifies the installation of vendor-provided packages including prisma@8.0.0-rc.27, @prisma/orm-postgres@8.0.0-rc.20, and supporting tools like tsx and dotenv from standard registries. It also describes using the npx prisma skills sync command to retrieve official skill definitions.
  • [COMMAND_EXECUTION]: The upgrade process requires executing several commands to manage the migration, including npx prisma contract emit, npx prisma db sign, and npx prisma migration plan. It also involves routine file management tasks like removing legacy migration directories (rm -r prisma/migrations) and running repository validation scripts (tsc, npm test).
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process project-specific data such as schema.prisma files and package.json configurations. This is a standard requirement for the upgrade's purpose and does not involve risky patterns such as exfiltrating data to untrusted domains or executing unvalidated external instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 11:25 AM