Навыки prisma-next-migrations

📦

prisma-next-migrations

Name: prisma-next-migrations
Author: prisma

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды📁 Доступ к файловой системе🔑 Переменные окружения

Manage Prisma Next Database Migrations

Database changes can fail, drift, or lose data when migration steps are unclear. This skill guides Prisma Next planning, transforms, application, verification, and recovery.

Поддерживает: Claude Codex Code(CC)

⚠️ 38 Плохо

Остановитесь и запросите подтверждение перед установкой.

Проверьте план и получите явное согласие пользователя перед изменением файлов.

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "prisma-next-migrations" from https://skillstore.io/skills/prisma-prisma-next-migrations.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-next-migrations/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/prisma-prisma-next-migrations.md Подписанный manifest GET /api/skills/prisma-prisma-next-migrations/manifest Подписанный lockfile GET /api/skills/prisma-prisma-next-migrations/lockfile

Протестировать

Использование «prisma-next-migrations». I added an optional field on my local Postgres database. Which workflow should I use?

Ожидаемый результат:

Use the local database update path because the database has no shared migration history.
Preview the operations before applying them.
Switch to a formal migration before sharing or deploying the change.

Использование «prisma-next-migrations». My generated migration contains a placeholder for a required column backfill.

Ожидаемый результат:

Open the generated migration source and replace every placeholder with a query-plan closure.
Use a rowset check that identifies remaining invalid rows.
Self-emit the migration package, inspect it, and apply it only after review.

Использование «prisma-next-migrations». Migration application reports a hash mismatch.

Ожидаемый результат:

The migration artifacts may be stale after source edits. Inspect the package, self-emit it, verify the changed files, then retry the migration.

Аудит безопасности

Высокий риск

v1 • 17.08.2026 Открыть версионный отчет

The Ruby backtick, path traversal, and reconnaissance alerts are scanner false positives caused by Markdown formatting, fixed imports, and documentation links. Database URL usage is confirmed because commands receive sensitive connection credentials. The skill also enables unprompted database mutation and execution of editable migration source, with no prompt injection or exfiltration intent found.

Просканировано файлов

524

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (2)

Высокий

SKILL.md:208-214

Unattended Destructive Database Migration

The skill directs users to apply pending migrations and states that migrate does not prompt. A mistaken target or missed destructive operation can cause production data loss.

The documented command applies database changes, and line 214 explicitly states that destructive operations run without a confirmation prompt.

Высокий

SKILL.md:281-287

Execution of Editable Migration Source

The skill instructs users to execute a repository migration file with Node. A malicious or compromised migration file can run arbitrary code with the agent's privileges.

The cited workflow directly executes an editable TypeScript migration file. Repository trust and source inspection are not enforced before execution.

Пункты проверки возможностей (20)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий

SKILL.md:95

Database connection strings

pnpm prisma-next db init --db $DATABASE_URL

This command expands $DATABASE_URL and passes the connection string to Prisma Next, granting access to a sensitive database endpoint. The use is intentional, but credential and target scope require protection.

Высокий

SKILL.md:96

Database connection strings

pnpm prisma-next contract emit && pnpm prisma-next db update --db $DATABASE_URL

Высокий

SKILL.md:98

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

Высокий

SKILL.md:99

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL

Высокий

SKILL.md:157

Database connection strings

pnpm prisma-next db update --db $DATABASE_URL --dry-run

Высокий

SKILL.md:158

Database connection strings

pnpm prisma-next db update --db $DATABASE_URL

Высокий

SKILL.md:166

Database connection strings

pnpm prisma-next db update --db $DATABASE_URL --json

Высокий

SKILL.md:200

Database connection strings

pnpm prisma-next migrate --show --db $DATABASE_URL

Высокий

SKILL.md:211

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

Высокий

SKILL.md:373

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL

Высокий

SKILL.md:374

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL --json > schema.json

Высокий

SKILL.md:396

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL

Высокий

SKILL.md:406

Database connection strings

pnpm prisma-next db sign --db $DATABASE_URL

Высокий

SKILL.md:419

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL --json

Высокий

SKILL.md:420

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL --json

Высокий

SKILL.md:434

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL --json

Высокий

SKILL.md:435

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL --json

Высокий

SKILL.md:442

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

Высокий

SKILL.md:453

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

Высокий

SKILL.md:499

Database connection strings

- `pnpm prisma-next migration log --db $DATABASE_URL` — flat chronological table of applied migratio

Факторы риска

⚙️ Внешние команды (50)

📁 Доступ к файловой системе (5)

SKILL.md:145 SKILL.md:228 SKILL.md:256 SKILL.md:505 SKILL.md:509

🔑 Переменные окружения (20)

Аудитор:: codex

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/prisma-prisma-next-migrations/security.svg)](https://skillstore.io/skills/prisma-prisma-next-migrations?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/prisma-prisma-next-migrations?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-next-migrations/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/prisma-prisma-next-migrations.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

prisma. (2026). prisma-next-migrations security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1

Цитата BibTeX

@techreport{prisma-prisma-prisma-next-migrations-2026,
  author = {prisma},
  title = {prisma-next-migrations security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "prisma-next-migrations security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "prisma"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1"
identifiers:
  - type: other
    value: "skillstore:prisma-prisma-next-migrations:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Prepare a Local Schema Change

Choose a fast local update or create a reviewable migration package after changing a contract.

Review a Production Migration

Inspect planned operations, data transforms, and destructive changes before deployment.

Recover a Failed Deployment

Diagnose drift, marker mismatches, hash mismatches, or partial migration state.

Попробуйте эти промпты

Choose a Migration Path

I changed my Prisma Next contract for [change]. Should I use db update or migration plan? Explain the safest sequence.

Plan a Data Backfill

Help me plan a [Postgres or MongoDB] migration for [schema change]. Include the required backfill checks, transform steps, and verification.

Resolve a Migration Error

Diagnose [error code or message] in my Prisma Next migration. Explain likely causes, evidence to inspect, and recovery steps that preserve data.

Design a Production Rollout

Create a production rollout plan for [migration]. Address graph state, destructive operations, transaction behavior, backups, verification, rollback, and target database differences.

Лучшие практики

Preview and inspect every migration before applying it to a shared database.
Use one end-contract reference for every data transform query plan.
Back up important data and confirm the database target before destructive operations.

Избегать

Do not use direct database updates against shared or production environments.
Do not edit canonical migration artifacts instead of the generated migration source.
Do not run editable migration files from an untrusted repository.

Часто задаваемые вопросы

When should I use db update?

Use it for a private development database when you do not need replayable migration history.

When should I use migration plan?

Use it for shared branches, reviewed changes, production deployments, or changes requiring data transforms.

Why does a migration contain placeholders?

The planner detected required data work but cannot infer your business transformation logic.

How do I fix a migration hash mismatch?

Inspect the edited migration source, self-emit the package, review regenerated artifacts, and retry.

Does the skill support Postgres and MongoDB?

Yes. It explains their different imports, migration factories, markers, and transaction behavior.

Can I apply migrations without review?

No. Migration commands may run destructive operations, and formal migration application does not prompt for confirmation.

Сведения для разработчиков

Автор

prisma

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/prisma/prisma-next/tree/e0e739ca6a0e076c97733ef30ec3bf7b1f43a27b/skills/prisma-next-migrations

Ссылка

95b65f484677458f391c01e2dcbbe5712331df94

Актуальность поддержки

17.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md