Prisma ORM is a Node.js and TypeScript database toolkit that lets applications work with databases through a programming interface instead of writing every query directly in SQL. Developers use it with databases including PostgreSQL, MySQL, MariaDB, SQL Server, SQLite, MongoDB, and CockroachDB. The catalogue add-ons provide agent rules, skills, hooks, agents, and other workflows for using Prisma.
Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add prisma/orm --skill prisma-8git clone --depth 1 https://github.com/prisma/ormWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/prisma/orm/prisma-8)<a href="https://agentmods.dev/skills/prisma/orm/prisma-8"><img src="https://agentmods.dev/badge/skills/prisma/orm/prisma-8/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/prisma/orm/prisma-8"><img src="https://agentmods.dev/badge/skills/prisma/orm/prisma-8.svg" alt="Reviewed on agentmods" width="80" height="20"></a>- Socket pass
- Snyk pass
- NVIDIA SkillSpector warn
SkillSpector: 2 findings, up to medium
These are SkillSpector’s own severities. On a checked sample its high-severity flags on skills were ~96% false positives — a documented command, a public API, a “never do X” rule — so we show them as a caution to read, not a verdict. Why →
- medium MCP Rug Pull · line 51 npx commands without a version suffix (e.g. @1.0.0) create a rug-pull risk if the upstream server is compromised and publishes a malicious update.Fix: Pin the version: npx @scope/[email protected]
- medium Excessive Agency · line 67 Skill enables autonomous high-impact decisions without human-in-the-loop verification. Critical operations (destructive commands, financial transactions, data deletion) should require explicit user confirmation.Fix: Add human-in-the-loop confirmation for destructive, irreversible, or high-impact operations. Never auto-execute commands that modify files, send data, or alter system state.
What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00220 | $0.03788 |
| Opus 5.5 | $0.00088 | $0.01515 |
| Sonnet 5.5 | $0.00044 | $0.00758 |
| Haiku 4.5 | $0.00022 | $0.00379 |
Grade A, and why
prisma-8 scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured today.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 97 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Prisma 8 (Prisma 8)
Edit your data contract. Prisma handles the rest.
Prisma 8 moves fast, and your training data about it is very likely outdated. This skill ships inside the installed Prisma packages, so it describes the exact version this project has — treat it and its reference files as the source of truth, over anything you remember about Prisma.
Pre-conditions
Check these before acting on anything below. Halt on the first one that fails and tell the user what is missing.
- The project is on Prisma 8.
prisma.config.tsexportsdefinePrismaConfig({ orm: ... }), andpackage.jsondepends on@prisma/orm-postgres,@prisma/orm-sqlite, or@prisma/orm-mongo. A project withschema.prismaand@prisma/clientis Prisma 7 or earlier; this skill does not apply to it, and its instructions will break such a project. - The skill matches the installed version. Compare
metadata.library_versionin this file's frontmatter with the installed@prisma/orm-*version inpackage.json. If they differ, runprisma skills syncand re-read this file before continuing. - The contract artefacts exist.
contract.jsonandcontract.d.tssit next to the contract source named byprisma.config.ts. If they are missing or older than the source, runprisma contract emitfirst; every query and migration instruction below assumes current artefacts.
Import paths in the references. The reference files spell façade imports as @internal/<target>/<subpath> and @internal/extension-<name>/<subpath>. In an application those packages are published as @prisma/orm-<target>/<subpath> (@prisma/orm-postgres/runtime, @prisma/orm-mongo/config, @prisma/orm-sqlite/runtime) and @prisma/orm-extension-<name>/<subpath> (@prisma/orm-extension-pgvector/control). Write the @prisma/orm-* name in user code; the two spellings are the same package. Paths already written as @prisma/orm-* in the references are exact. The metadata.library_version in this file's frontmatter is the version it was published with; if it does not match the project's installed Prisma packages, run prisma skills sync and re-read.
What ships with it
60 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- references/build.md 9.1 KB
- references/contract.md 49 KB
- references/debug.md 21 KB
- references/feedback.md 17 KB
- references/migration-model.md 19 KB
- references/migration-review.md 20 KB
- references/migrations.md 59 KB
- references/queries-mongo.md 14 KB
- references/queries-postgres.md 51 KB
- references/queries.md 23 KB
- references/quickstart.md 31 KB
- references/runtime.md 44 KB
- references/supabase.md 21 KB
- references/upgrade-app.md 10 KB
- references/upgrade-extension.md 10 KB
- upgrading/app/upgrades/0.10-to-0.11/instructions.md 1.9 KB
- upgrading/app/upgrades/0.11-to-0.12/instructions.md 22 KB
- upgrading/app/upgrades/0.11-to-0.12/re-emit-closed-mongo-contracts.ts 6.8 KB runs code
- upgrading/app/upgrades/0.11-to-0.12/re-emit-domain-namespaced-contracts.ts 6.2 KB runs code
- upgrading/app/upgrades/0.11-to-0.12/re-emit-postgres-public-default.ts 6.2 KB runs code
- upgrading/app/upgrades/0.11-to-0.12/strip-migration-labels-hints.ts 12 KB runs code
- upgrading/app/upgrades/0.12-to-0.13/instructions.md 17 KB
- upgrading/app/upgrades/0.12-to-0.13/re-emit-mti-variant-link-columns.ts 7.7 KB runs code
- upgrading/app/upgrades/0.13-to-0.14/instructions.md 29 KB
- upgrading/app/upgrades/0.13-to-0.14/migration-op-factories-to-methods.ts 10 KB runs code
- upgrading/app/upgrades/0.13-to-0.14/uuid-preset-rename.ts 1.3 KB runs code
- upgrading/app/upgrades/0.14-to-0.15/instructions.md 20 KB
- upgrading/app/upgrades/0.15-to-0.16/instructions.md 11 KB
- upgrading/app/upgrades/0.16-to-0.17/instructions.md 54 KB
- upgrading/app/upgrades/0.16-to-0.17/strip-sha256-hash-prefixes.ts 14 KB runs code
- upgrading/app/upgrades/0.17-to-8.0.0-rc.1/instructions.md 4.9 KB
- upgrading/app/upgrades/0.7-to-0.8/instructions.md 183 B
- upgrading/app/upgrades/0.8-to-0.9/instructions.md 2.7 KB
- upgrading/app/upgrades/0.8-to-0.9/strip-inline-contracts.ts 7.8 KB runs code
- upgrading/app/upgrades/0.9-to-0.10/instructions.md 5.4 KB
- upgrading/app/upgrades/0.9-to-0.10/stamp-storage-types-kind.ts 13 KB runs code
- upgrading/app/upgrades/8.0.0-rc.1-to-8.0.0-rc.2/instructions.md 39 KB
- upgrading/app/upgrades/8.0.0-rc.10-to-8.0.0-rc.11/instructions.md 1.5 KB
- upgrading/app/upgrades/8.0.0-rc.11-to-8.0.0-rc.12/instructions.md 49 KB
- upgrading/app/upgrades/8.0.0-rc.11-to-8.0.0-rc.12/scripts/multifile-psl/add-use-prisma-8-directive.mjs 1.8 KB runs code
- upgrading/app/upgrades/8.0.0-rc.11-to-8.0.0-rc.12/scripts/psl-verbatim-table-names/add-model-map.mjs 8.5 KB runs code
- upgrading/app/upgrades/8.0.0-rc.12-to-8.0.0-rc.13/instructions.md 25 KB
- upgrading/app/upgrades/8.0.0-rc.12-to-8.0.0-rc.13/scripts/execution-ref-entry-field/rename-execution-ref-keys.ts 6.5 KB runs code
- upgrading/app/upgrades/8.0.0-rc.13-to-8.0.0-rc.14/instructions.md 37 KB
- upgrading/app/upgrades/8.0.0-rc.14-to-8.0.0-rc.15/instructions.md 108 KB
- upgrading/app/upgrades/8.0.0-rc.14-to-8.0.0-rc.15/scripts/data-type-in-contract/data-type-in-contract.ts 54 KB runs code
- upgrading/app/upgrades/8.0.0-rc.15-to-8.0.0-rc.16/instructions.md 9.3 KB
- upgrading/app/upgrades/8.0.0-rc.16-to-8.0.0-rc.17/instructions.md 71 KB
- upgrading/app/upgrades/8.0.0-rc.17-to-8.0.0-rc.18/instructions.md 79 KB
- upgrading/app/upgrades/8.0.0-rc.17-to-8.0.0-rc.18/scripts/sql-expression-literals-psl/rewrite-sql-strings.mjs 8.5 KB runs code
- upgrading/app/upgrades/8.0.0-rc.2-to-8.0.0-rc.3/instructions.md 56 B
- upgrading/app/upgrades/8.0.0-rc.3-to-8.0.0-rc.4/instructions.md 7.5 KB
- upgrading/app/upgrades/8.0.0-rc.4-to-8.0.0-rc.5/instructions.md 2.3 KB
- upgrading/app/upgrades/8.0.0-rc.5-to-8.0.0-rc.6/instructions.md 9.5 KB
- upgrading/app/upgrades/8.0.0-rc.6-to-8.0.0-rc.7/instructions.md 1.8 KB
- upgrading/app/upgrades/8.0.0-rc.7-to-8.0.0-rc.8/instructions.md 1.8 KB
- upgrading/app/upgrades/8.0.0-rc.8-to-8.0.0-rc.9/instructions.md 5.1 KB
- upgrading/app/upgrades/8.0.0-rc.9-to-8.0.0-rc.10/instructions.md 5.1 KB
- upgrading/extension/upgrades/0.10-to-0.11/instructions.md 15 KB
- upgrading/extension/upgrades/0.11-to-0.12/instructions.md 42 KB
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- today Changed 22c99a8988ab
- yesterday Changed ab03bb013da3
- 6d ago Changed 6320a6c2bb2b
- 7d ago Changed ea1bd78fe8fd
- 12d ago Changed b43b71150030
- 13d ago Changed 3acd32db8ae5
- 14d ago Changed 05db563b0322
- 20d ago Changed 1f9530aab41d
- 22d ago Changed 0f4e6799bfc0
- 26d ago First seen · 97 lines · 220 tokens per session scan A c29871ff7031
prisma-8 is a skill published in the GitHub repository prisma/orm (47,683 stars, last pushed yesterday), licensed Apache-2.0. It adds 220 tokens to every session and 3,788 once invoked, about $0.0009 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other skills, from other repositories
output-dev-credentials
Store and reference encrypted secrets in Output SDK workflows using @outputai/core/credentials. Use when integrating API keys, database passwords, or third-party tokens.
django-migrations
Django migration patterns and safety workflow for PostHog. Use when creating, adjusting, or reviewing Django/Postgres migrations, including non-blocking index/constraint changes, multi-phase schema changes, data backfills, migration conflict rebasing, and product model moves that require SeparateDatabaseAndState. Also…
using-redis-token-buckets
Use when adding a bucket-like rate limit backed by Redis: a per-caller budget with burst capacity and continuous refill, a refund path for requests that did no work, or a limit whose Retry-After must be a real wait rather than a window edge. posthog/tokenbucket.py provides an atomic Lua token bucket (consume, refund…
prisma-orm
Use when modeling data or writing type-safe queries with Prisma ORM in TypeScript — schema.prisma, prisma.config.ts, the generated Prisma Client, and Prisma Migrate, including the v6 to v7 upgrade. NOT schema-as-TS with a SQL builder (that is drizzle-orm), NOT ORM-agnostic zero-downtime migration (that is…
webiny-api-opensearch-catalog
Name: createOpenSearchClient Import: import { createOpenSearchClient } from "webiny/api/opensearch" Source: @webiny/api-opensearch/client.ts.
typescript-expert
Expert-level TypeScript development with modern tooling, advanced types, and best practices. Use this skill for TypeScript projects requiring type-safe code, modern bundling, and comprehensive testing.