Навыки prisma-next-quickstart
📦

prisma-next-quickstart

Ревизия содержимого r1 Высокий риск ⚙️ Внешние команды🌐 Доступ к сети📁 Доступ к файловой системе🔑 Переменные окружения

Start Prisma Next with a Working Database

New and existing projects need a clear path to their first Prisma Next query. This skill guides setup, connection, contract inference, and verification.

Поддерживает: Claude Codex Code(CC)
⚠️ 38 Плохо

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента
Review the Skillstore skill "prisma-next-quickstart" from https://skillstore.io/skills/prisma-prisma-next-quickstart.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-next-quickstart/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Протестировать

Использование «prisma-next-quickstart». I cloned a Prisma Next project. What should I do first?

Ожидаемый результат:

The project uses the PostgreSQL target and a PSL contract under the Prisma source directory. Next, verify the connection and round-trip one existing model.

Использование «prisma-next-quickstart». Help me use Prisma Next with an existing database.

Ожидаемый результат:

The brownfield path will infer a draft contract from the live schema. Review model names and constraints before emitting, signing, and verifying it.

Использование «prisma-next-quickstart». Initialization worked, but my first query fails.

Ожидаемый результат:

  • Confirm the database variable exists without displaying its value.
  • Verify the configured contract path and emitted artifacts.
  • Check marker status and database drift before changing the contract.

Аудит безопасности

Высокий риск

Most static findings are false positives caused by Markdown backticks, documentation links, and ordinary Prisma environment configuration. Confirmed risks are direct .env inspection, passing DATABASE_URL through command arguments, and default CLI telemetry.

1
Просканировано файлов
343
Проанализировано строк
3
Пункты проверки
0
Ложные срабатывания проигнорированы

Подтверждённые проблемы безопасности (3)

Высокий
Environment file access
- `.env` / `.env.example` — is `DATABASE_URL` set, or only the example?
The workflow explicitly directs the agent to read .env while checking DATABASE_URL. Reading the file can place unrelated secrets and database credentials into model context.
Высокий
Environment file access
- [ ] **First-touch orientation:** read `prisma-next.config.ts`, the contract source, `db.ts`, and `
The workflow explicitly directs the agent to read .env while checking DATABASE_URL. Reading the file can place unrelated secrets and database credentials into model context.
Низкий
Agent-Invoked Commands Send Telemetry by Default
The skill states that every Prisma Next command sends anonymous telemetry after a notice and records agent invocation unless the user opts out.
The telemetry behavior and available opt-out controls are explicitly documented on line 200. The disclosure reduces surprise but does not remove the privacy consideration.
Пункты проверки возможностей (3)

Это реальные локальные возможности, которые могут ожидаться для этого навыка, поэтому они требуют проверки, но не считаются подтверждённым вредоносным поведением.

Высокий
Database connection strings
pnpm prisma-next contract infer --db "$DATABASE_URL" --output src/prisma/contract.prisma
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
Высокий
Database connection strings
| Bring an existing DB into a PN contract | `prisma-next contract infer --db "$DATABASE_URL"` | this
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
Высокий
Database connection strings
- [ ] **Brownfield path:** ran `contract infer --db "$DATABASE_URL" --output src/prisma/contract.pri
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
Аудитор:: codex
Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет
Оценка безопасности

Копировать ссылку на отчёт

https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/prisma-prisma-next-quickstart/security.svg)](https://skillstore.io/skills/prisma-prisma-next-quickstart?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/prisma-prisma-next-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-next-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/prisma-prisma-next-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Академические ссылки (APA · BibTeX · CFF)

Цитата APA

prisma. (2026). prisma-next-quickstart security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1

Цитата BibTeX

@techreport{prisma-prisma-prisma-next-quickstart-2026, author = {prisma}, title = {prisma-next-quickstart security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "prisma-next-quickstart security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "prisma" date-released: "2026-08-17" url: "https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1" identifiers: - type: other value: "skillstore:prisma-prisma-next-quickstart:audit:1" description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний
55
Архитектура
85
Сопровождаемость
87
Контент
65
Сообщество
83
Соответствие спецификации

Что вы можете построить

Orient a Scaffolded Project

Review an existing Prisma Next scaffold and complete its first database round trip.

Create a New Project

Initialize Prisma Next, configure the database, and verify the starter contract.

Adopt an Existing Database

Infer a contract from a live schema, review it, and sign the database marker.

Попробуйте эти промпты

Find My First Step
Review this Prisma Next project and identify my adoption path. Explain the contract location, then guide my first database round trip.
Initialize a Greenfield Project
Set up Prisma Next in this project for [postgres or mongodb] using [psl or typescript]. Preserve existing files and verify the starter model.
Adopt a Live Database
Guide Prisma Next adoption for my existing [database type] database. Infer the contract, pause for review, then emit, sign, and verify it.
Diagnose an Incomplete Setup
Audit this Prisma Next setup for contract paths, generated artifacts, runtime wiring, environment presence, marker status, and drift. Propose the smallest corrective sequence.

Лучшие практики

  • Read the project configuration and contract before proposing commands.
  • Complete one write-read cycle before expanding the data model.
  • Review inferred contracts before signing an existing database.

Избегать

  • Do not expose environment values while checking database configuration.
  • Do not edit generated contract artifacts by hand.
  • Do not use development schema synchronization for production releases.

Часто задаваемые вопросы

Which databases does this skill support?
It covers PostgreSQL and MongoDB targets supported by Prisma Next.
Can it start a new project?
Yes. It guides initialization in the current project directory and verifies the starter contract.
Can it adopt an existing database?
Yes. It guides contract inference, review, emission, marker signing, and drift verification.
Does it migrate from another ORM?
No. Use a dedicated migration skill or treat the database as an existing schema.
Will it design my complete data model?
No. It prioritizes a verified first query before broader contract design.
Does Prisma Next collect telemetry?
The documented CLI enables anonymous telemetry by default. Users can disable it with supported environment variables or the telemetry command.

Сведения для разработчиков

Автор

prisma

Лицензия

MIT

Ревизия Skillstore

r1

Примечание о версии

Автор не указал версию.

Ссылка

54455bf488ee05604867a28ab8befd1464627f4d

Актуальность поддержки

17.08.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md