prisma-compute
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses package runners like
bunx,npx, andpnpm dlxto download and execute official Prisma utilities, including@prisma/cliandcreate-prisma. It also includes a command to install AI agent skills from the officialprisma/skillsrepository. All identified download targets are vendor-owned resources. - [COMMAND_EXECUTION]: The skill instructs the agent to execute a wide range of CLI commands for application lifecycle management. These include building, running, and deploying apps, as well as managing Prisma Postgres databases and environment variables. The commands are standard for the Prisma Platform CLI and are used for their intended administrative purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted project data, such as configuration files and dependency manifests, to automate deployment workflows.
- Ingestion points: The agent is instructed to read
package.json,prisma.compute.ts, and various framework-specific configuration files (e.g.,next.config.ts,vite.config.ts,nest-cli.json) across multiple files, includingSKILL.mdandreferences/troubleshooting.md. - Boundary markers: The skill provides a "Source-of-Truth Order" and explicit decision trees to guide the agent in interpreting project files, reducing the risk of accidental obedience to instructions embedded within those files.
- Capability inventory: The skill has the capability to write to the file system (via
initand scaffolding), execute shell commands for builds and deployments, and perform network operations through the Prisma Platform CLI. - Sanitization: The skill includes mandatory safety rules such as
env-do-not-leak-secretsand explicit instructions to never print service tokens, full connection URLs, or secret environment variable values in logs or feedback messages.
Audit Metadata