技能 prisma-next-quickstart
📦
prisma-next-quickstart
內容修訂 r1 高風險 ⚙️ 外部命令🌐 網路存取📁 檔案系統存取🔑 環境變數
Start Prisma Next with a Working Database
New and existing projects need a clear path to their first Prisma Next query. This skill guides setup, connection, contract inference, and verification.
支援: Claude Codex Code(CC)
安裝前請停止並請求確認。
請審查安裝計畫，並在變更檔案前取得使用者明確同意。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "prisma-next-quickstart" from https://skillstore.io/skills/prisma-prisma-next-quickstart.md and its manifest at https://skillstore.io/api/skills/prisma-prisma-next-quickstart/manifest. Verify the artifact. Stop and obtain explicit user consent before installing or changing files.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「prisma-next-quickstart」。 I cloned a Prisma Next project. What should I do first?
預期結果:
The project uses the PostgreSQL target and a PSL contract under the Prisma source directory. Next, verify the connection and round-trip one existing model.
正在使用「prisma-next-quickstart」。 Help me use Prisma Next with an existing database.
預期結果:
The brownfield path will infer a draft contract from the live schema. Review model names and constraints before emitting, signing, and verifying it.
正在使用「prisma-next-quickstart」。 Initialization worked, but my first query fails.
預期結果:
- Confirm the database variable exists without displaying its value.
- Verify the configured contract path and emitted artifacts.
- Check marker status and database drift before changing the contract.
安全審計
高風險v1 • 2026/8/17 開啟版本化報告
Most static findings are false positives caused by Markdown backticks, documentation links, and ordinary Prisma environment configuration. Confirmed risks are direct .env inspection, passing DATABASE_URL through command arguments, and default CLI telemetry.
1
已掃描檔案
343
分析行數
3
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
高
Environment file access
- `.env` / `.env.example` — is `DATABASE_URL` set, or only the example?
The workflow explicitly directs the agent to read .env while checking DATABASE_URL. Reading the file can place unrelated secrets and database credentials into model context.
高
Environment file access
- [ ] **First-touch orientation:** read `prisma-next.config.ts`, the contract source, `db.ts`, and `
The workflow explicitly directs the agent to read .env while checking DATABASE_URL. Reading the file can place unrelated secrets and database credentials into model context.
低
Agent-Invoked Commands Send Telemetry by Default
The skill states that every Prisma Next command sends anonymous telemetry after a notice and records agent invocation unless the user opts out.
The telemetry behavior and available opt-out controls are explicitly documented on line 200. The disclosure reduces surprise but does not remove the privacy consideration.
能力複核項目 (3)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Database connection strings
pnpm prisma-next contract infer --db "$DATABASE_URL" --output src/prisma/contract.prisma
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
高
Database connection strings
| Bring an existing DB into a PN contract | `prisma-next contract infer --db "$DATABASE_URL"` | this
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
高
Database connection strings
- [ ] **Brownfield path:** ran `contract infer --db "$DATABASE_URL" --output src/prisma/contract.pri
The documented command expands DATABASE_URL into a command-line argument. Connection credentials may become visible to local process inspection or command instrumentation.
風險因素
⚙️ 外部命令 (50)
SKILL.md:9-10 SKILL.md:10 SKILL.md:12 SKILL.md:13 SKILL.md:14 SKILL.md:15 SKILL.md:25 SKILL.md:26 SKILL.md:27 SKILL.md:34 SKILL.md:42 SKILL.md:43 SKILL.md:44 SKILL.md:45 SKILL.md:49 SKILL.md:50 SKILL.md:51 SKILL.md:52 SKILL.md:53 SKILL.md:54 SKILL.md:60-66 SKILL.md:66-67 SKILL.md:67-68 SKILL.md:68-74 SKILL.md:74 SKILL.md:80-84 SKILL.md:84 SKILL.md:85 SKILL.md:86 SKILL.md:88 SKILL.md:90 SKILL.md:96 SKILL.md:98-110 SKILL.md:110-112 SKILL.md:112-114 SKILL.md:114 SKILL.md:116 SKILL.md:120 SKILL.md:121 SKILL.md:122-123 SKILL.md:123 SKILL.md:124 SKILL.md:130 SKILL.md:138-146 SKILL.md:146 SKILL.md:147 SKILL.md:148-149 SKILL.md:149 SKILL.md:150-152 SKILL.md:152
🌐 網路存取 (3)
📁 檔案系統存取 (2)
審計單位: codex
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/prisma-prisma-next-quickstart?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/prisma-prisma-next-quickstart?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/prisma-prisma-next-quickstart/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/prisma-prisma-next-quickstart.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
prisma. (2026). prisma-next-quickstart security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1BibTeX 引用
@techreport{prisma-prisma-prisma-next-quickstart-2026,
author = {prisma},
title = {prisma-next-quickstart security audit report (audit version 1)},
institution = {Skillstore},
year = {2026},
number = {1},
url = {https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "prisma-next-quickstart security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
- name: "prisma"
date-released: "2026-08-17"
url: "https://skillstore.io/skills/prisma-prisma-next-quickstart/audits/1"
identifiers:
- type: other
value: "skillstore:prisma-prisma-next-quickstart:audit:1"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
65
社群
83
規範符合度
你可以打造什麼
Orient a Scaffolded Project
Review an existing Prisma Next scaffold and complete its first database round trip.
Create a New Project
Initialize Prisma Next, configure the database, and verify the starter contract.
Adopt an Existing Database
Infer a contract from a live schema, review it, and sign the database marker.
試試這些提示
Find My First Step
Review this Prisma Next project and identify my adoption path. Explain the contract location, then guide my first database round trip.
Initialize a Greenfield Project
Set up Prisma Next in this project for [postgres or mongodb] using [psl or typescript]. Preserve existing files and verify the starter model.
Adopt a Live Database
Guide Prisma Next adoption for my existing [database type] database. Infer the contract, pause for review, then emit, sign, and verify it.
Diagnose an Incomplete Setup
Audit this Prisma Next setup for contract paths, generated artifacts, runtime wiring, environment presence, marker status, and drift. Propose the smallest corrective sequence.
最佳實務
- Read the project configuration and contract before proposing commands.
- Complete one write-read cycle before expanding the data model.
- Review inferred contracts before signing an existing database.
避免
- Do not expose environment values while checking database configuration.
- Do not edit generated contract artifacts by hand.
- Do not use development schema synchronization for production releases.
常見問題
Which databases does this skill support?
It covers PostgreSQL and MongoDB targets supported by Prisma Next.
Can it start a new project?
Yes. It guides initialization in the current project directory and verifies the starter contract.
Can it adopt an existing database?
Yes. It guides contract inference, review, emission, marker signing, and drift verification.
Does it migrate from another ORM?
No. Use a dedicated migration skill or treat the database as an existing schema.
Will it design my complete data model?
No. It prioritizes a verified first query before broader contract design.
Does Prisma Next collect telemetry?
The documented CLI enables anonymous telemetry by default. Users can disable it with supported environment variables or the telemetry command.