Навыки prisma-next-migration-review
📦

prisma-next-migration-review

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды📁 Доступ к файловой системе🔑 Переменные окружения

Review Prisma Next Migrations Before Deployment

Deployment teams can misread migration state, refs, and divergent graph paths. This skill reviews the live origin, target destination, diagnostics, and pending operations.

Поддерживает: Claude Codex Code(CC)
⚠️ 38 Плохо

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "prisma-next-migration-review" from https://skillstore.io/skills/prisma-prisma-next-migration-review.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-next-migration-review/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Протестировать

Использование «prisma-next-migration-review». What will run when this branch deploys to staging?

Ожидаемый результат:

  • Origin: the live staging database marker.
  • Destination: the staging ref.
  • Result: two pending migrations and no unreachable edges.
  • Review required: one destructive operation must be approved before apply.

Использование «prisma-next-migration-review». Production ref and database marker do not match.

Ожидаемый результат:

The mismatch can indicate an out-of-band apply, a restored database, or divergent schema changes. Verify the live database before moving the ref.

Использование «prisma-next-migration-review». How should CI decide whether staging is deployable?

Ожидаемый результат:

Run migration status with the staging ref and database, inspect structured diagnostics, block warning severities, and preview operations before an approved apply.

Аудит безопасности

Высокий риск

Static findings are false positives caused by Markdown formatting, local examples, quoted database variables, and documentation links. One high-risk semantic issue remains: live migrations can execute without an explicit user confirmation requirement.

1
Просканировано файлов
229
Проанализировано строк
0
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (1)

Высокий
Database migrations can run without explicit user confirmation
The skill provides live staging and production apply commands, while noting that migrate has no destructive-operation prompt. An agent could apply destructive planned changes without explicit approval.
The apply commands and missing confirmation behavior are explicitly documented. The skill warns about review but does not require user approval before mutation.
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/prisma-prisma-next-migration-review/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/prisma-prisma-next-migration-review/security.svg)](https://skillstore.io/skills/prisma-prisma-next-migration-review?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/prisma-prisma-next-migration-review?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-next-migration-review/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/prisma-prisma-next-migration-review.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

prisma. (2026). prisma-next-migration-review security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prisma-prisma-next-migration-review/audits/1

Цитата BibTeX

@techreport{prisma-prisma-prisma-next-migration-review-2026, author = {prisma}, title = {prisma-next-migration-review security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/prisma-prisma-next-migration-review/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "prisma-next-migration-review security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "prisma" date-released: "2026-08-17" url: "https://skillstore.io/skills/prisma-prisma-next-migration-review/audits/1" identifiers: - type: other value: "skillstore:prisma-prisma-next-migration-review:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
83
Соответствие спецификации

Что вы можете построить

Review a staging deployment

Identify the live staging marker, target ref, pending path, diagnostics, and destructive operations before deployment.

Resolve concurrent migration changes

Reassess a stale migration plan after another branch advances the shared graph head.

Create a migration CI gate

Check structured migration diagnostics and block deployment when warning conditions appear.

Попробуйте эти промпты

Explain migration state
Explain the Prisma Next origin, destination, marker, and ref for my migration question. Identify what information is still missing.
Review pending staging migrations
Review what will run on staging. Use the staging database and staging ref, then summarize pending migrations, diagnostics, and destructive operations.
Investigate a ref mismatch
Investigate why the production ref and live database marker differ. Compare likely causes and recommend verification steps before changing either state.
Design a guarded CI workflow
Design a CI migration gate for staging. Parse structured diagnostics, fail on warnings, preview pending operations, and require approval before applying changes.

Лучшие практики

  • Name the live database origin and intended destination ref before reviewing a deployment.
  • Use structured diagnostics in CI instead of parsing human-readable summaries.
  • Preview and summarize destructive operations, then obtain approval before applying live migrations.

Избегать

  • Do not treat a destination ref as a database connection selector.
  • Do not move a ref only to silence a mismatch before investigating the cause.
  • Do not rely on process exit status alone because warning diagnostics can exit successfully.

Часто задаваемые вопросы

Does this skill create migrations?
No. It reviews migration state and deployment paths. Use a migration-authoring workflow to create or re-plan migrations.
Why is a database connection needed?
The live database marker defines the origin. Offline review cannot determine which migrations are already applied.
What does a ref represent?
A ref is a named pointer to a contract hash and optional invariants. It does not select a database.
How are concurrent migrations resolved?
Rebase onto the new graph head, then repeat the edit, plan, and apply workflow. Port custom data transformations manually.
Can CI rely on the command exit code?
No. Some warning diagnostics exit successfully. CI should parse structured diagnostics and fail according to severity and code.
Does migrate ask before destructive changes?
No. Review status and operation counts first, then require explicit approval before running migrate against a live environment.

Сведения для разработчиков

Автор

prisma

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Ссылка

1ee450393e13e9ce6a4c7da05ce2de5786f1e198

Актуальность поддержки

17.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md