The Agent Skills Directory

[COMMAND_EXECUTION]: The skill instructs the agent to execute standard Prisma CLI commands (prisma format, prisma generate, prisma migrate) and the prisma-case-format utility via npx. These are established tools used for database schema management and code generation in the Node.js ecosystem.
[EXTERNAL_DOWNLOADS]: The skill uses npx to run Prisma-related tools. While this involves fetching packages from the npm registry at runtime, these are well-known developer tools from trusted sources and do not pose a security risk in this context.
[DATA_EXFILTRATION]: The skill references environment variables such as DATABASE_URL, which is the standard mechanism for Prisma to connect to a database. No suspicious exfiltration patterns, hardcoded credentials, or unauthorized network operations were identified.
[PROMPT_INJECTION]: No attempts to override system safety guidelines, perform role-play hijacks (DAN), or extract system prompts were detected. The instructions are purely functional and focused on architectural conventions.
[SAFE]: The skill promotes security best practices by recommending the use of parameterized queries via $queryRaw to prevent SQL injection and explicitly prohibiting the use of $queryRawUnsafe with untrusted user input.

prisma-dev