Case 01343
A fast, offline static risk analysis CLI for AI agent skill files. Detects malicious instructions, steganographic payloads, and dangerous capability chains.
npx -y skills add knownasnaffy/prompthound --skill case_01343Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.
2 things to look at
- no licenseNo license file was found in the repository. Code published without one is not open source by default, so using it at work is a question for whoever answers licensing questions where you are.
- 0 stars0 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
What its author says it does
Copied from the file, not written here
Design, analyze, optimize and evolve database schemas. Use when the user asks to design schemas from scratch, choose between SQL and NoSQL engines, analyze or fix an existing schema (normalization, naming, constraints), plan index strategy, generate migration scripts, or interpret EXPLAIN plans.
SKILL.md
3.8 KB, 744 tokens by cl100k_base, as published. Nobody here has run it
Database Designer
Convert a design request or existing schema into a structured, validated, production-ready artifact.
Activation
Use this skill when the user asks to:
- design or review a database schema (DDL, ERD, Prisma, JSON Schema)
- choose a database engine or decide SQL vs NoSQL
- analyze normalization, constraints, naming or data types
- plan an indexing strategy or diagnose slow queries
- generate migration scripts with rollback
- interpret an EXPLAIN plan or diagnose N+1 patterns
Workflow
- Classify the request:
design|analyze|index|migrate|query|select-engine. - Load the relevant reference for that mode:
design/analyze→{baseDir}/references/database-design-reference.md- normalization questions →
{baseDir}/references/normalization_guide.md - indexing / EXPLAIN →
{baseDir}/references/index_strategy_patterns.md - engine selection →
{baseDir}/references/database_selection_decision_tree.md
- Run the appropriate script when the user provides a schema or queries:
# Analyze schema for issues (normalization, constraints, naming, types) python {baseDir}/scripts/schema_analyzer.py --schema=<ddl_file> # Suggest index improvements for a query workload python {baseDir}/scripts/index_optimizer.py --schema=<ddl_file> --queries=<queries_file> # Generate up/down migration scripts python {baseDir}/scripts/migration_generator.py --before=<old_schema> --after=<new_schema> - Formalize the design: objects, relationships, constraints, normalization level, primary/foreign keys.
- Emit the artifact: DDL, Mermaid ERD, Prisma schema, or JSON Schema — one format unless the user asks for multiple.
- Declare trade-offs: note any denormalization choices, missing constraints, or engine-specific limitations.
Output Contract
- Open with the dominant design decision or issue found.
- Emit one primary artifact (DDL, ERD, or schema) per response.
- Annotate non-obvious choices (e.g. why a partial index, why a surrogate key).
- Declare
Information Losswhen the target format cannot express a constraint (e.g. CHECK logic in Prisma). - Close with indexing recommendations and next migration step if applicable.
Key Rules
- Default to PostgreSQL unless the user specifies another engine or the decision tree points elsewhere.
- Default to 3NF for new schemas; document any intentional deviation and the reason.
- Every generated migration must include a
downscript. - For destructive changes (DROP COLUMN with data), always recommend a logical backup first.
- Do not generate application-layer connection pool code unless explicitly asked — reference the patterns instead.
Guardrails
- Do not skip normalization analysis when designing from scratch.
- Do not recommend over-indexing — flag indexes that may hurt write throughput.
- Flag N+1 patterns but do not generate ORM-specific code unless the user's stack is known.
- Stay within schema, index, migration and query scope; for large-scale cross-engine migrations refer to
migration-architect.
Self Check
Before emitting any artifact, verify:
- all foreign keys are declared;
- primary key strategy is explicit (surrogate vs natural);
- normalization level is stated and intentional deviations justified;
- migration script has a
downcounterpart; - no inline example code duplicates what a reference file already covers.
What ships with it: 7 files
179.8 KB alongside SKILL.md, 3 of them executable
references/
- database-design-reference.md13.7 KB
- database_selection_decision_tree.md16.0 KB
- index_strategy_patterns.md11.6 KB
- normalization_guide.md10.4 KB
scripts/
- index_optimizer.pyruns38.0 KB
- migration_generator.pyruns49.2 KB
- schema_analyzer.pyruns41.0 KB