技能 prisma-next-migrations

📦

prisma-next-migrations

Name: prisma-next-migrations
Author: prisma

内容修订 r1 高风险 ⚙️ 外部命令📁 文件系统访问🔑 环境变量

Manage Prisma Next Database Migrations

Database changes can fail, drift, or lose data when migration steps are unclear. This skill guides Prisma Next planning, transforms, application, verification, and recovery.

支持: Claude Codex Code(CC)

⚠️ 38 差

安装前请停下并请求确认。

请审查安装计划，并在更改文件前获得用户明确同意。

使用我的智能体安装

将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。

智能体请求

Review the Skillstore skill "prisma-next-migrations" from https://skillstore.io/skills/prisma-prisma-next-migrations.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-next-migrations/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.

你的智能体仍应展示其计划，并按安全策略请求必要确认。

Agent 可读资源

当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。

Markdown 详情 GET /skills/prisma-prisma-next-migrations.md 已签名 manifest GET /api/skills/prisma-prisma-next-migrations/manifest 已签名 lockfile GET /api/skills/prisma-prisma-next-migrations/lockfile

测试它

正在使用“prisma-next-migrations”。 I added an optional field on my local Postgres database. Which workflow should I use?

预期结果:

Use the local database update path because the database has no shared migration history.
Preview the operations before applying them.
Switch to a formal migration before sharing or deploying the change.

正在使用“prisma-next-migrations”。 My generated migration contains a placeholder for a required column backfill.

预期结果:

Open the generated migration source and replace every placeholder with a query-plan closure.
Use a rowset check that identifies remaining invalid rows.
Self-emit the migration package, inspect it, and apply it only after review.

正在使用“prisma-next-migrations”。 Migration application reports a hash mismatch.

预期结果:

The migration artifacts may be stale after source edits. Inspect the package, self-emit it, verify the changed files, then retry the migration.

安全审计

高风险

v1 • 2026/8/17 打开版本化报告

The Ruby backtick, path traversal, and reconnaissance alerts are scanner false positives caused by Markdown formatting, fixed imports, and documentation links. Database URL usage is confirmed because commands receive sensitive connection credentials. The skill also enables unprompted database mutation and execution of editable migration source, with no prompt injection or exfiltration intent found.

已扫描文件

524

分析行数

复核项

已忽略误报

已确认安全问题 (2)

高

SKILL.md:208-214

Unattended Destructive Database Migration

The skill directs users to apply pending migrations and states that migrate does not prompt. A mistaken target or missed destructive operation can cause production data loss.

The documented command applies database changes, and line 214 explicitly states that destructive operations run without a confirmation prompt.

高

SKILL.md:281-287

Execution of Editable Migration Source

The skill instructs users to execute a repository migration file with Node. A malicious or compromised migration file can run arbitrary code with the agent's privileges.

The cited workflow directly executes an editable TypeScript migration file. Repository trust and source inspection are not enforced before execution.

能力复核项 (20)

这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。

高

SKILL.md:95

Database connection strings

pnpm prisma-next db init --db $DATABASE_URL

This command expands $DATABASE_URL and passes the connection string to Prisma Next, granting access to a sensitive database endpoint. The use is intentional, but credential and target scope require protection.

高

SKILL.md:96

Database connection strings

pnpm prisma-next contract emit && pnpm prisma-next db update --db $DATABASE_URL

高

SKILL.md:98

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

高

SKILL.md:99

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL

高

SKILL.md:157

Database connection strings

pnpm prisma-next db update --db $DATABASE_URL --dry-run

高

SKILL.md:158

Database connection strings

pnpm prisma-next db update --db $DATABASE_URL

高

SKILL.md:166

Database connection strings

pnpm prisma-next db update --db $DATABASE_URL --json

高

SKILL.md:200

Database connection strings

pnpm prisma-next migrate --show --db $DATABASE_URL

高

SKILL.md:211

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

高

SKILL.md:373

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL

高

SKILL.md:374

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL --json > schema.json

高

SKILL.md:396

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL

高

SKILL.md:406

Database connection strings

pnpm prisma-next db sign --db $DATABASE_URL

高

SKILL.md:419

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL --json

高

SKILL.md:420

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL --json

高

SKILL.md:434

Database connection strings

pnpm prisma-next db verify --db $DATABASE_URL --json

高

SKILL.md:435

Database connection strings

pnpm prisma-next db schema --db $DATABASE_URL --json

高

SKILL.md:442

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

高

SKILL.md:453

Database connection strings

pnpm prisma-next migrate --db $DATABASE_URL

高

SKILL.md:499

Database connection strings

- `pnpm prisma-next migration log --db $DATABASE_URL` — flat chronological table of applied migratio

风险因素

⚙️ 外部命令 (50)

📁 文件系统访问 (5)

SKILL.md:145 SKILL.md:228 SKILL.md:256 SKILL.md:505 SKILL.md:509

🔑 环境变量 (20)

审计者: codex

分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。

打开版本化报告

复制报告链接

https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/prisma-prisma-next-migrations/security.svg)](https://skillstore.io/skills/prisma-prisma-next-migrations?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/prisma-prisma-next-migrations?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-next-migrations/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/prisma-prisma-next-migrations.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

学术引用 (APA · BibTeX · CFF)

APA 引用

prisma. (2026). prisma-next-migrations security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1

BibTeX 引用

@techreport{prisma-prisma-prisma-next-migrations-2026,
  author = {prisma},
  title = {prisma-next-migrations security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "prisma-next-migrations security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "prisma"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/prisma-prisma-next-migrations/audits/1"
identifiers:
  - type: other
    value: "skillstore:prisma-prisma-next-migrations:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据证据置信度: 中

架构

可维护性

内容

社区

规范符合性

你能构建什么

Prepare a Local Schema Change

Choose a fast local update or create a reviewable migration package after changing a contract.

Review a Production Migration

Inspect planned operations, data transforms, and destructive changes before deployment.

Recover a Failed Deployment

Diagnose drift, marker mismatches, hash mismatches, or partial migration state.

试试这些提示

Choose a Migration Path

I changed my Prisma Next contract for [change]. Should I use db update or migration plan? Explain the safest sequence.

Plan a Data Backfill

Help me plan a [Postgres or MongoDB] migration for [schema change]. Include the required backfill checks, transform steps, and verification.

Resolve a Migration Error

Diagnose [error code or message] in my Prisma Next migration. Explain likely causes, evidence to inspect, and recovery steps that preserve data.

Design a Production Rollout

Create a production rollout plan for [migration]. Address graph state, destructive operations, transaction behavior, backups, verification, rollback, and target database differences.

最佳实践

Preview and inspect every migration before applying it to a shared database.
Use one end-contract reference for every data transform query plan.
Back up important data and confirm the database target before destructive operations.

避免

Do not use direct database updates against shared or production environments.
Do not edit canonical migration artifacts instead of the generated migration source.
Do not run editable migration files from an untrusted repository.

常见问题

When should I use db update?

Use it for a private development database when you do not need replayable migration history.

When should I use migration plan?

Use it for shared branches, reviewed changes, production deployments, or changes requiring data transforms.

Why does a migration contain placeholders?

The planner detected required data work but cannot infer your business transformation logic.

How do I fix a migration hash mismatch?

Inspect the edited migration source, self-emit the package, review regenerated artifacts, and retry.

Does the skill support Postgres and MongoDB?

Yes. It explains their different imports, migration factories, markers, and transaction behavior.

Can I apply migrations without review?

No. Migration commands may run destructive operations, and formal migration application does not prompt for confirmation.

开发者详情

作者

prisma

许可证

MIT

Skillstore 修订

版本提示

作者未声明版本。

仓库

https://github.com/prisma/prisma-next/tree/e0e739ca6a0e076c97733ef30ec3bf7b1f43a27b/skills/prisma-next-migrations

引用

95b65f484677458f391c01e2dcbbe5712331df94

维护新鲜度

2026/8/17

使用量

0 次下载 · 0 次浏览

文件结构

📄 SKILL.md