prisma-cli
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation for various CLI commands including database schema management and raw SQL execution (
prisma db execute). It handles destructive actions such asprisma migrate resetandprisma db push --force-resetwith specific warnings. - [DYNAMIC_EXECUTION]: Documents standard ORM workflows that involve code generation (
prisma generate) and the execution of user-defined database seeding scripts using runtime tools liketsx,ts-node, ornode. - [INDIRECT_PROMPT_INJECTION]: As a technical reference, the skill exposes the agent to data ingestion surfaces such as database schema files (
.prisma) and SQL scripts. The risk is mitigated by explicit instructions requiring the agent to obtain user consent and follow an 'AI safety checkpoint' protocol before taking sensitive actions. - [SAFE]: The skill implements a robust safety mechanism (
references/agent-safety.md) designed to prevent agents from performing destructive operations without verified user intent, using a specific environment variable (PRISMA_USER_CONSENT_FOR_DANGEROUS_AI_ACTION) to track consent.
Audit Metadata