prisma-client-api
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation for executing raw SQL commands using Prisma Client methods such as
$queryRawand$executeRaw. - The documentation includes explicit security guidance on preventing SQL injection attacks.
- It correctly distinguishes between safe parameterized queries and unsafe string concatenation methods like
$queryRawUnsafe. - Warning labels are clearly applied to methods that present high risk if used with untrusted input.
- [SAFE]: The skill functions as a standard technical reference for a well-known database ORM.
- It encourages best practices for secret management by using environment variables (
process.env.DATABASE_URL) for database connections. - It includes optimization patterns, such as the singleton pattern for Next.js, to prevent resource exhaustion in development environments.
- All external links point to the official Prisma documentation domain.
Audit Metadata