AGENT LAB: SKILLS
skills/prisma/skills/prisma-cli/Gen Agent Trust Hub

prisma-cli

Warn

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • COMMAND_EXECUTION (MEDIUM): The prisma db seed command executes arbitrary scripts defined in the prisma.config.ts file. This allows for the execution of code within the development environment, which could be exploited if the configuration or the script itself is compromised.\n- COMMAND_EXECUTION (MEDIUM): The prisma db execute command enables running raw SQL scripts from a file or standard input. If used by an agent on untrusted input, this could lead to unauthorized database operations or data manipulation.\n- PROMPT_INJECTION (LOW): The prisma init --prompt command represents an indirect prompt injection surface, as it ingests natural language to generate database schema code, which may be influenced by malicious instructions in the prompt.\n- EXTERNAL_DOWNLOADS (LOW): The use of bunx mentioned in the documentation can lead to the download and execution of external packages from the npm registry during runtime.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 04:43 PM