prisma-next-migrations
40Medium
The skill performs unauthorized access to sensitive environment variables and executes unconstrained system commands without declaring necessary tool permissions, posing a significant risk of data exfiltration and system compromise.
HygienePackaging & Manifest1 finding
Skill Info
Nameprisma/prisma-next/prisma-next-migrations
Registrygithub
Versiond76a792023e3
PURLpkg:github/prisma/prisma-next@d76a792023e3?skill=prisma-next-migrations
Stars381
Installs182
Source
Install
This skill has findings worth reviewing before installing.
GitHub
182 installs
Skills.shDocs
npx skills add https://github.com/prisma/prisma-nextAssessments (3)
AI Agent Traps ↗Access to sensitive environment variables detectedmediumcredential theftAML.T0055AML.T0037LLM02:2025
Access to sensitive environment variables detected (seen 20 times in this file at lines 95, 96, 98, 99, 159, 160, 168, 202, 213, 375, …)
100% confidenceline 95
$DATABASE_URL
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/prisma/prisma-next/prisma-next-migrations)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/prisma/prisma-next/prisma-next-migrations"><img src="https://mondoo.com/ai-agent-security/api/badge/github/prisma/prisma-next/prisma-next-migrations.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/prisma/prisma-next/prisma-next-migrations.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet, discover and control Shadow AI usage.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow