backend-prisma-sync-module
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands via
npmwithin theapps/backendworkspace to start the database, run migrations, and generate the Prisma client. This is a core part of the skill's functionality. - [PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface as it reads and parses entity definitions from
modules/<modulo>/src/**/*.entity.ts. Malicious code or comments in these files could attempt to manipulate the resulting Prisma schema. - Ingestion points: Project entity files in
modules/<modulo>/src/**/*.entity.ts. - Boundary markers: None present to isolate source code from instructions during context construction.
- Capability inventory: Writes to filesystem (
.model.prisma) and executes workspace-scoped shell commands (npm). - Sanitization: No specific sanitization logic is detailed for processing extracted entity fields before they are used to generate schema definitions.
Audit Metadata