prisma-client-api
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for generating database queries that ingest untrusted user data. It includes explicit boundary markers such as security warnings and 'Safe' vs 'Unsafe' code examples. The skill leverages Prisma's native sanitization (parameterized queries) and manages capabilities like full CRUD and raw SQL execution responsibly through these security guidelines.\n- [DYNAMIC_EXECUTION]: The documentation references methods for raw SQL execution ($queryRaw, $executeRaw) and client extensions ($extends). These features are documented with clear security instructions, emphasizing the prevention of SQL injection via tagged templates and parameterization.\n- [EXTERNAL_DOWNLOADS]: The skill refers to official packages from the Prisma ecosystem, a well-known service provider, which is considered safe behavior.
Audit Metadata