Getting it into your agent
It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.
git clone --depth 1 https://github.com/christopherlouet/claude-basenpx agentmods add skills/christopherlouet/claude-base/dev-prismaWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/christopherlouet/claude-base/dev-prisma)<a href="https://agentmods.dev/skills/christopherlouet/claude-base/dev-prisma"><img src="https://agentmods.dev/badge/skills/christopherlouet/claude-base/dev-prisma/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/christopherlouet/claude-base/dev-prisma"><img src="https://agentmods.dev/badge/skills/christopherlouet/claude-base/dev-prisma.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00065 | $0.00761 |
| Opus 5.5 | $0.00026 | $0.00304 |
| Sonnet 5.5 | $0.00013 | $0.00152 |
| Haiku 4.5 | $0.00006 | $0.00076 |
Grade A, and why
dev-prisma scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 16d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 38 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prisma ORM (pointer + workflow)
Prisma's own skills (prisma-cli, prisma-client-api, …) track each Prisma release: install them. This pointer adds the workflow below.
Prisma publishes them at prisma/skills (9 skills: CLI, Client API, database setup, Prisma Postgres, the v6 → v7 upgrade, driver adapters, MongoDB, Compute). The foundation's former 418-line skill drifted on every Prisma release.
git clone https://github.com/prisma/skills ~/dev/vendor-skills/prisma
git -C ~/dev/vendor-skills/prisma checkout 1123817e60d15ca0f3af91878923241dee7e3b09 # the registry pin
ln -s ~/dev/vendor-skills/prisma/prisma-cli ./.claude/skills/prisma-cli
ln -s ~/dev/vendor-skills/prisma/prisma-client-api ./.claude/skills/prisma-client-api
Recipe entry: docs/recipes/recommended-vendor-skills.md §"Prisma — prisma/skills".
Schema change workflow
- Edit
schema.prisma: the relation on both sides; indexes per.claude/rules/prisma.md. npx prisma migrate dev --create-only --name <change>— writes the migration without applying it.- Read the generated SQL: a rename shows up as drop + add (data loss) — split it as
.claude/rules/prisma.mdsays before anything runs. npx prisma migrate devto apply it, thennpx prisma generate— since Prisma 7,migrate devno longer regenerates the client (v6 did). Commit the migration folder with the schema; one migration per change, never a secondinit.- Production: apply the committed migrations from CI or the deploy step — the exact commands, and what never runs against production, are in
.claude/rules/prisma.md.
Discipline that holds whichever skill fires
The migration, secret and query rules live in .claude/rules/prisma.md, scoped to the Prisma files, so they load even when a vendor skill fires instead of this one.
- Security: never fetch
passwordHashor any sensitive column without explicit need;selectoverinclude—.claude/rules/prisma.mdand.claude/rules/security.md. - TDD with a real DB: integration tests hit a real test database (Docker Compose pattern), never a Prisma mock — the
dev-tddskill. - Postgres interop: with Supabase, Prisma runs against the same Postgres and RLS still applies — the
dev-supabaseskill.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 16d ago Changed · -2 lines · +14 tokens per session 4c98a36dd177
- 22d ago Changed · -2 lines 4b4268c337a7
- 23d ago Changed · -6 lines 8e03bf3f297a
- 24d ago Changed · -1 lines 54f65065f21a
- 1mo ago First seen · 49 lines · 51 tokens per session scan A ff221eca760e
dev-prisma is a skill published in the GitHub repository christopherlouet/claude-base (5 stars, last pushed 2d ago), licensed MIT. It adds 65 tokens to every session and 761 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
accessibility-a11y
WCAG 2.2 compliance, ARIA patterns, keyboard navigation, screen readers, automated testing.
database-expert
Advanced database design and administration for PostgreSQL, MongoDB, and Redis. Use when designing schemas, optimizing queries, managing database performance, or implementing data patterns.
agent-e2e-test-specialist
Specialist subagent: Playwright, Cypress, and visual regression testing specialist. Use only when the user explicitly asks for E2E tests, browser test automation, or visual regression testing. Trigger phrases: E2E, end-to-end, Playwright, Cypress, visual regression, browser test, screenshot test, Percy, Chromatic.
generic-fullstack-feature-developer
Guide feature development for full-stack applications with architecture focus. Covers Next.js App Router patterns, NestJS backend services, database models, data workflows, and seamless integration. Use when adding new features, refactoring existing code, or planning major changes.
agent-database-expert
Specialist subagent: Expert database architect and engineer for PostgreSQL, MongoDB, Redis, and all major databases. Use when designing schemas, optimizing queries, planning migrations, implementing caching, or troubleshooting database performance.
agent-test-generator
Specialist subagent: Generates comprehensive test suites using TDD patterns. Use only when the user explicitly asks for tests, improved coverage, or test-first development.