prisma-expert
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted local data from
prisma/schema.prismaand migration files to diagnose issues.\n - Ingestion points:
prisma/schema.prisma,prisma/migrations/(detected viagrepandlscommands).\n - Boundary markers: Absent in the instructions provided to the agent.\n
- Capability inventory: The skill has the ability to execute
npx prismacommands (which can modify databases), runpsqlcommands, and perform file system operations.\n - Sanitization: No explicit sanitization of the content of the schema or migration files is mentioned before processing.\n- [COMMAND_EXECUTION]: The skill executes shell commands using
npx,grep,ls, andpsqlto detect the environment and manage the database. These are functional requirements for the stated purpose of a Prisma ORM expert.\n- [EXTERNAL_DOWNLOADS]: The skill usesnpx, which may fetch theprismapackage from the official npm registry (npmjs.org). This is standard and expected behavior for Node.js development tools.
Audit Metadata