prisma-next-contract
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard functionality for the Prisma Next framework, authored by prisma. It references official packages under the
@prisma-next/scope, which are legitimate vendor resources. - [COMMAND_EXECUTION]: The skill instructs the agent to run CLI commands like
prisma-next contract emitandprisma-next contract infer. These are essential for the skill's purpose of contract authoring and schema management. - [DATA_EXPOSURE_EXFILTRATION]: While the skill mentions the use of
$DATABASE_URL, it follows standard security practices by using environment variables for database connections during introspection tasks. - [DYNAMIC_EXECUTION]: The skill involves authoring and executing configuration files (
prisma-next.config.ts) and TypeScript-based contracts (contract.ts), which is the intended architectural design of the Prisma Next platform for generating types and migrations.
Audit Metadata