prisma-database-setup
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill guides users through installing standard Node.js packages via npm (e.g.,
prisma,@prisma/client, and various driver adapters). These are legitimate, well-known packages required for the ORM's functionality. - [CREDENTIALS_UNSAFE] (SAFE): The documentation correctly emphasizes the use of environment variables and
.envfiles for managing sensitive database connection strings, avoiding the risk of hardcoded credentials. - [COMMAND_EXECUTION] (SAFE): Instructions include standard CLI commands like
npx prisma generateandprisma init. These are routine operations within the Prisma ecosystem and do not involve suspicious or obfuscated execution patterns. - [INDIRECT_PROMPT_INJECTION] (LOW): The skill defines how to ingest local configuration files (
schema.prisma,prisma.config.ts). Since these files are typically author-controlled during development, the risk of external injection via these files is minimal.
Audit Metadata