技能 prisma-next-quickstart
📦
prisma-next-quickstart
内容修订 r1 高风险 ⚙️ 外部命令🌐 网络访问📁 文件系统访问🔑 环境变量
Start Prisma Next with a Working Database
New and existing projects need a clear path to their first Prisma Next query. This skill guides setup, connection, contract inference, and verification.
支持: Claude Codex Code(CC)
安装前请停下并请求确认。
请审查安装计划，并在更改文件前获得用户明确同意。
使用我的智能体安装
将此请求复制给你的智能体，其中包含权威 Skill 页面和清单。
智能体请求
Review the Skillstore skill "prisma-next-quickstart" from https://skillstore.io/skills/prisma-prisma-next-quickstart.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-next-quickstart/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智能体仍应展示其计划，并按安全策略请求必要确认。
Agent 可读资源
当 AI Agent、爬虫或脚本需要干净上下文，而不是读取完整页面时，请使用这些链接。
测试它
正在使用“prisma-next-quickstart”。 I cloned a Prisma Next project. What should I do first?
预期结果:
The project uses the PostgreSQL target and a PSL contract under the Prisma source directory. Next, verify the connection and round-trip one existing model.
正在使用“prisma-next-quickstart”。 Help me use Prisma Next with an existing database.
预期结果:
The brownfield path will infer a draft contract from the live schema. Review model names and constraints before emitting, signing, and verifying it.
正在使用“prisma-next-quickstart”。 Initialization worked, but my first query fails.
预期结果:
- Confirm the database variable exists without displaying its value.
- Verify the configured contract path and emitted artifacts.
- Check marker status and database drift before changing the contract.
安全审计
高风险v1 • 2026/8/17 打开版本化报告
Most static findings are false positives caused by Markdown backticks, documentation links, and ordinary Prisma environment configuration. Confirmed risks are direct .env inspection, passing DATABASE_URL through command arguments, and default CLI telemetry.
1
已扫描文件
343
分析行数
3
复核项
0
已忽略误报
已确认安全问题 (3)
高
Environment file access
- `.env` / `.env.example` — is `DATABASE_URL` set, or only the example?
The workflow explicitly directs the agent to read .env while checking DATABASE_URL. Reading the file can place unrelated secrets and database credentials into model context.
高
Environment file access
- [ ] **First-touch orientation:** read `prisma-next.config.ts`, the contract source, `db.ts`, and `
The workflow explicitly directs the agent to read .env while checking DATABASE_URL. Reading the file can place unrelated secrets and database credentials into model context.
低
Agent-Invoked Commands Send Telemetry by Default
The skill states that every Prisma Next command sends anonymous telemetry after a notice and records agent invocation unless the user opts out.
The telemetry behavior and available opt-out controls are explicitly documented on line 200. The disclosure reduces surprise but does not remove the privacy consideration.
能力复核项 (3)
这些是真实的本地能力，对此技能可能是预期行为，因此需要复核，但不会按已确认恶意行为计分。
高
Database connection strings
pnpm prisma-next contract infer --db "$DATABASE_URL" --output src/prisma/contract.prisma
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
高
Database connection strings
| Bring an existing DB into a PN contract | `prisma-next contract infer --db "$DATABASE_URL"` | this
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
高
Database connection strings
- [ ] **Brownfield path:** ran `contract infer --db "$DATABASE_URL" --output src/prisma/contract.pri
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
风险因素
⚙️ 外部命令 (50)
SKILL.md:9-10 SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:34 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:60-66 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-74 SKILL.md:74 SKILL.md:80-84 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:88 SKILL.md:90 SKILL.md:96 SKILL.md:98-110 SKILL.md:110-112 SKILL.md:112-114 SKILL.md:114 SKILL.md:116 SKILL.md:120 SKILL.md:121 SKILL.md:122-123 SKILL.md:123 SKILL.md:124 SKILL.md:130 SKILL.md:138-146 SKILL.md:146 SKILL.md:147 SKILL.md:148-149 SKILL.md:149 SKILL.md:150-152 SKILL.md:152
🌐 网络访问 (3)
📁 文件系统访问 (2)
审计者: codex
分享与引用此报告
分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据，不判断该 Skill 是否安全。
复制报告链接
https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/prisma-prisma-next-quickstart?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/prisma-prisma-next-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-next-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/prisma-prisma-next-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>学术引用 (APA · BibTeX · CFF)
APA 引用
prisma. (2026). prisma-next-quickstart security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1BibTeX 引用
@techreport{prisma-prisma-prisma-next-quickstart-2026,
author = {prisma},
title = {prisma-next-quickstart security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "prisma-next-quickstart security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "prisma"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1"
identifiers:
- type: other
value: "skillstore:prisma-prisma-next-quickstart:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 评分
评分依据 证据置信度: 中 55
架构
85
可维护性
87
内容
65
社区
83
规范符合性
你能构建什么
Orient a Scaffolded Project
Review an existing Prisma Next scaffold and complete its first database round trip.
Create a New Project
Initialize Prisma Next, configure the database, and verify the starter contract.
Adopt an Existing Database
Infer a contract from a live schema, review it, and sign the database marker.
试试这些提示
Find My First Step
Review this Prisma Next project and identify my adoption path. Explain the contract location, then guide my first database round trip.
Initialize a Greenfield Project
Set up Prisma Next in this project for [postgres or mongodb] using [psl or typescript]. Preserve existing files and verify the starter model.
Adopt a Live Database
Guide Prisma Next adoption for my existing [database type] database. Infer the contract, pause for review, then emit, sign, and verify it.
Diagnose an Incomplete Setup
Audit this Prisma Next setup for contract paths, generated artifacts, runtime wiring, environment presence, marker status, and drift. Propose the smallest corrective sequence.
最佳实践
- Read the project configuration and contract before proposing commands.
- Complete one write-read cycle before expanding the data model.
- Review inferred contracts before signing an existing database.
避免
- Do not expose environment values while checking database configuration.
- Do not edit generated contract artifacts by hand.
- Do not use development schema synchronization for production releases.
常见问题
Which databases does this skill support?
It covers PostgreSQL and MongoDB targets supported by Prisma Next.
Can it start a new project?
Yes. It guides initialization in the current project directory and verifies the starter contract.
Can it adopt an existing database?
Yes. It guides contract inference, review, emission, marker signing, and drift verification.
Does it migrate from another ORM?
No. Use a dedicated migration skill or treat the database as an existing schema.
Will it design my complete data model?
No. It prioritizes a verified first query before broader contract design.
Does Prisma Next collect telemetry?
The documented CLI enables anonymous telemetry by default. Users can disable it with supported environment variables or the telemetry command.