Skills prisma-client-api
๐Ÿ“ฆ

prisma-client-api

v7.6.0 Content revision r2 Medium Risk โš™๏ธ External commands๐Ÿ“ Filesystem access๐Ÿ”‘ Env variables๐ŸŒ Network access

Build Safer Prisma Client Queries

Prisma Client APIs can be difficult to navigate across queries, filters, relations, transactions, and configuration. This reference provides focused patterns and examples for common Prisma Client tasks.

Supports: Claude Codex Code(CC)
๐Ÿ“Š 70 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request
Review the Skillstore skill "prisma-client-api" from https://skillstore.io/skills/prisma-prisma-client-api.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-client-api/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Test it

Using "prisma-client-api". Find active users, return only required fields, and paginate the results.

Expected outcome:

  • Recommended method: findMany with an active-status filter, descending creation order, and a bounded result size.
  • Field selection: return only identifiers, names, and email addresses required by the caller.
  • Pagination note: use a stable unique cursor for subsequent pages.

Using "prisma-client-api". Choose a transaction strategy for transferring funds between two accounts.

Expected outcome:

Use an interactive transaction with validated account records, guarded balance changes, a strict timeout, and no external network work inside the transaction.

Using "prisma-client-api". Review a raw SQL search that includes user input.

Expected outcome:

  • Risk: unsafe raw SQL interpolation can permit injection.
  • Safer approach: use parameterized tagged templates and allowlist any dynamic identifiers.
  • Logging note: redact query parameters before sending events to application logs.

Security Audit

Medium Risk
v6 โ€ข 7/23/2026 Open versioned report

All 151 static findings are false positives caused by Markdown syntax, TypeScript templates, relative imports, environment configuration, SQL examples, and documentation links. No command execution, path traversal, environment-file reading, reconnaissance, unauthorized network behavior, or prompt injection was found. One medium concern remains because examples log raw query parameters without redaction and may expose sensitive data.

9
Files scanned
2,155
Lines analyzed
0
Review items
0
False positives ignored

Confirmed security concerns (1)

Medium
Unredacted Query Parameter Logging
Examples print raw query parameters to console without redaction guidance. Parameters may contain personal data or credentials and enter retained application logs.
Both examples directly log e.params from Prisma query events. Query parameters commonly contain user data, and neither example recommends redaction or development-only use.

Risk Factors

โš™๏ธ External commands (50)
๐Ÿ“ Filesystem access (9)
๐Ÿ”‘ Env variables (25)
๐ŸŒ Network access (3)
Audited by: codex View Audit History โ†’
Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report
Security Assessment

Copy report link

https://skillstore.io/skills/prisma-prisma-client-api/audits/6?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/prisma-prisma-client-api/security.svg)](https://skillstore.io/skills/prisma-prisma-client-api?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/prisma-prisma-client-api?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-client-api/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/prisma-prisma-client-api.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Academic citations (APA ยท BibTeX ยท CFF)

APA citation

prisma. (2026). prisma-client-api security audit report (audit version 6) [Author version 7.6.0]. Skillstore. https://skillstore.io/skills/prisma-prisma-client-api/audits/6

BibTeX citation

@techreport{prisma-prisma-prisma-client-api-2026, author = {prisma}, title = {prisma-client-api security audit report (audit version 6)}, institution = {Skillstore}, year = {2026}, number = {6}, url = {https://skillstore.io/skills/prisma-prisma-client-api/audits/6}, note = {Author version 7.6.0} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "prisma-client-api security audit report (audit version 6)" version: "7.6.0" type: report authors: - name: "prisma" date-released: "2026-07-23" url: "https://skillstore.io/skills/prisma-prisma-client-api/audits/6" identifiers: - type: other value: "skillstore:prisma-prisma-client-api:audit:6" description: "Skillstore immutable audit report identifier"

Skillstore Score

Why this score Evidence Confidence: Medium
45
Architecture
100
Maintainability
87
Content
65
Community
91
Spec Compliance

What You Can Build

Implement backend data access

Choose typed Prisma methods, filters, relations, and result shapes for an application feature.

Design reliable transactions

Select sequential or interactive transactions and define suitable timeouts, isolation, and rollback behavior.

Review query security

Check raw SQL parameterization, sensitive field selection, query logging, and destructive operations before release.

Try These Prompts

Create a basic query
Using my User model requirements, explain a Prisma Client findMany query with filters, sorting, and a result limit.
Add relations and pagination
Design a Prisma query that selects specific user fields, includes recent posts, and uses cursor pagination. Explain each option.
Plan an account transaction
Propose an interactive transaction for transferring account funds. Include validation, isolation guidance, rollback behavior, and limits on external work.
Audit an advanced data layer
Audit my Prisma Client setup and raw SQL approach for injection, connection handling, transaction boundaries, sensitive logging, and type safety.

Best Practices

  • Prefer generated Prisma types and parameterized query APIs for application data.
  • Select only required fields, bound result sizes, and use stable cursor pagination.
  • Keep transactions short and redact sensitive query parameters before logging.

Avoid

  • Do not interpolate untrusted input into unsafe raw SQL strings.
  • Do not log database parameters without redaction and production controls.
  • Do not run unfiltered bulk updates or deletes without explicit review.

Frequently Asked Questions

Does this skill execute database queries?
No. It provides reference guidance and examples; your application and Prisma Client perform all database operations.
Which Prisma version does it cover?
The skill declares version 7.6.0. Confirm APIs against the Prisma packages installed in your project.
Can it help with raw SQL?
Yes. It covers parameterized raw queries, dynamic fragments, unsafe variants, and SQL injection prevention.
Does it configure my database connection?
It explains constructor and adapter patterns, but you must supply and protect your connection settings.
Can it create schemas or migrations?
No. The reference focuses on Prisma Client APIs, not schema design, generation, or migration workflows.
How should I protect sensitive data?
Select only required fields, parameterize inputs, redact query logs, and review all destructive operations.

Developer Details

Author

prisma

License

MIT

Author version

v7.6.0

Skillstore revision

r2

Ref

ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006

Maintenance freshness

7/25/2026

Usage

0 downloads ยท 0 views

File structure

๐Ÿ“ references/

๐Ÿ“„ client-methods.md

๐Ÿ“„ constructor.md

๐Ÿ“„ filters.md

๐Ÿ“„ model-queries.md

๐Ÿ“„ query-options.md

๐Ÿ“„ raw-queries.md

๐Ÿ“„ relations.md

๐Ÿ“„ transactions.md

๐Ÿ“„ SKILL.md

More from prisma

View all
View all