📦
Audit History
prisma-next-debug - 1 audit
Audit version 1 Latest
Aug 17, 2026, 08:41 AM
Static analysis misidentified Markdown inline-code formatting as executable shell syntax. The skill is documentation-only, but it recommends a command that can apply destructive database changes without explicit approval.
1
Files scanned
146
Lines analyzed
5
Review items
0
False positives ignored
Confirmed security concerns (1)
High
Destructive Database Confirmation Bypass
The recovery table advises re-running db update with -y to apply destructive changes without requiring explicit user approval or a backup.
Line 101 explicitly recommends the confirmation-bypass flag for a command identified as destructive. A dry-run alternative reduces, but does not remove, the risk.
Risk Factors
⚙️ External commands (50)
SKILL.md:10 SKILL.md:14 SKILL.md:16 SKILL.md:22 SKILL.md:23 SKILL.md:31 SKILL.md:33-46 SKILL.md:46-48 SKILL.md:48 SKILL.md:50 SKILL.md:52-54 SKILL.md:54-56 SKILL.md:56 SKILL.md:58 SKILL.md:60-62 SKILL.md:62 SKILL.md:66 SKILL.md:70 SKILL.md:74 SKILL.md:75 SKILL.md:76 SKILL.md:80 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:87 SKILL.md:88 SKILL.md:89 SKILL.md:90 SKILL.md:91 SKILL.md:92 SKILL.md:93 SKILL.md:94 SKILL.md:95 SKILL.md:96 SKILL.md:97 SKILL.md:98 SKILL.md:99 SKILL.md:100 SKILL.md:101 SKILL.md:102 SKILL.md:103 SKILL.md:104 SKILL.md:105 SKILL.md:106 SKILL.md:107 SKILL.md:108 SKILL.md:109-110 SKILL.md:110 SKILL.md:111
🌐 Network access (1)
📁 Filesystem access (1)
🔑 Env variables (1)
Audited by: codex