Best for
- "Open a PR for this contribution"
- "Submit this as a PR to prisma-next"
- "I'm contributing to prisma-next, finalize my change"
prisma/prisma/skills-contrib/contrib-pr/SKILL.md
Open a high-quality external contributor PR against prisma-next. Use when the user is an outside contributor (not a Prisma maintainer) and wants to submit a change as a pull request from a fork. Encodes the contribution flow from CONTRIBUTING.md so the resulting PR passes review on the first round.
Decision brief
This skill is for external contributors to prisma/prisma who are using an LLM-based agent to author or finalize a PR. It is intentionally separate from the maintainer-facing create-pr skill: it does not depend on Linear access, internal plan/spec documents, or any private contex…
Compatibility matrix
| Platform | Status | Evidence | What to check |
|---|---|---|---|
| Codex | Not declared | No explicit evidence | Portability before use |
| Claude Code | Not declared | No explicit evidence | Portability before use |
| Cursor | Not declared | No explicit evidence | Portability before use |
| Gemini CLI | Not declared | No explicit evidence | Portability before use |
Installation
The source command is displayed only when detected. A safe inspection prompt is always available so your agent can explain every action before execution.
npx skills add https://github.com/prisma/prisma --skill "skills-contrib/contrib-pr"Inspect the Agent Skill "contrib-pr" from https://github.com/prisma/prisma/blob/20996a2e57f53179dd7bcb9e5234b72f88fcd4d0/skills-contrib/contrib-pr/SKILL.md at commit 20996a2e57f53179dd7bcb9e5234b72f88fcd4d0. List every install step, command, network request, credential, file read/write, external action, and rollback step. Explain whether it fits my task. Do not install or execute anything until I approve.
Workflow
Before doing anything else, read the project's contribution docs:
Before doing anything else, read the project's contribution docs:
Before opening the PR, check:
Run the suite that matches the scope of the change. From CONTRIBUTING.md:
Every commit on the PR must have a Signed-off-by: trailer matching the commit author's name + email. Without this, the DCO status check blocks the PR from merging.
Permission review
The documentation asks the agent to run terminal commands or scripts.
pnpm typecheck && pnpm lint && pnpm test:packagesThe documentation asks the agent to run terminal commands or scripts.
git log origin/main..HEAD --format='%h %an <%ae>%n%b%n---'Evidence record
| Signal | Value | Evidence type | Meaning |
|---|---|---|---|
| Quality score | 94/100 | Computed | Documentation, specificity, maintenance, and trust rules |
| Repository stars | 47,569 | Source | Repository attention, not individual Skill quality |
| Compatibility | 0 platforms | Source | Declared in the catalog source record |
| Usage guide | automated source guide | Editorial | Generated or reviewed according to the visible evidence level |
Pinned source
This skill is for external contributors to prisma/prisma who are using an LLM-based agent to author or finalize a PR. It is intentionally separate from the maintainer-facing create-pr skill: it does not depend on Linear access, internal plan/spec documents, or any private context. It encodes the expectations laid out in CONTRIBUTING.md as a runnable workflow, so the PR you produce matches the shape maintainers expect on the first review round.
If the user is a maintainer with access to internal Linear tickets, use create-pr instead.
Trigger this skill when the user says any of:
If the user has clearly already followed the contribution flow and just needs the gh pr create invocation, you may skip directly to step 5.
Verify the result, not the authorship. The maintainers do not ask whether the change was AI-assisted; they verify that:
This skill is a pit of success — there is no CI gate that checks you used it. Following it is the cheapest way to land the PR cleanly.
Before doing anything else, read the project's contribution docs:
CONTRIBUTING.md. This is the source of truth for setup, the test command set, DCO signoff, and PR expectations.CODE_OF_CONDUCT.md so you understand what's expected in your interactions on the PR thread.SECURITY.md. If your change is fixing a security issue, stop and use the Private Vulnerability Reporting flow instead — do not open a public PR.If anything in CONTRIBUTING.md contradicts what this skill says, CONTRIBUTING.md wins.
Before opening the PR, check:
CONTRIBUTING.md. If not, recommend they do — maintainers will respond within 5 business days, and a half-day issue conversation can prevent a one-week PR rewrite when the design direction differs from what they expect.Run the suite that matches the scope of the change. From CONTRIBUTING.md:
| Change scope | Command |
|---|---|
| Type errors only | pnpm typecheck |
| Lint / formatting | pnpm lint |
Unit tests in packages/** | pnpm test:packages |
| Examples | pnpm test:examples |
| Postgres / SQLite e2e | pnpm test:e2e |
| Database integration | pnpm test:integration |
| Vite plugin / Cloudflare Worker | pnpm test:vite-plugin (needs Docker) |
| Everything | pnpm test:all |
The minimum bar before opening any PR is:
pnpm typecheck && pnpm lint && pnpm test:packages
If any of these fail, fix the failure (or push back on the user about whether the change is actually right) before continuing. Do not open a PR with a known-failing test or lint error. It will be closed for that reason alone.
If the change touches the SQL runtime, also run pnpm test:integration and/or pnpm test:e2e. If you can't tell whether the change touches the SQL runtime, run them anyway — they're self-contained (PGlite + mongodb-memory-server, no external DB needed).
Every commit on the PR must have a Signed-off-by: trailer matching the commit author's name + email. Without this, the DCO status check blocks the PR from merging.
Check current commits:
git log origin/main..HEAD --format='%h %an <%ae>%n%b%n---'
For each commit, verify the body contains a Signed-off-by: line whose name + email match %an <%ae>.
If any commit is missing the trailer:
git commit --amend --signoff --no-editgit rebase --signoff origin/mainAfter amending or rebasing, force-push to the contributor's fork: git push --force-with-lease.
Conventional commit form, lowercase after the colon, no trailing period, under ~60 chars:
type(scope): concise lowercase description
type is one of: feat, fix, chore, docs, refactor, test. Pick the one that best describes the change. scope is the primary affected package or layer (sql-runtime, postgres-adapter, contract, cli, framework, mongo-orm, etc.). If the change spans many packages, pick the one most central to the change.
Examples:
feat(sql-orm-client): support computed includesfix(postgres-adapter): handle null in jsonb columnsdocs(contributing): clarify pnpm install stepsThe PR title flows directly into the auto-generated GitHub Release notes when the version that contains it is published — pick a title a downstream user would understand.
Fill in the pull request template sections in order:
Fixes #N / Refs #N. If no issue exists because the change is small, write n/a — small change.pnpm test:* commands you ran. If you ran a manual repro (e.g. against the demo), say so.Do not include an "AI-authored" disclosure. Maintainers do not require it; it adds noise.
git push -u origin HEAD from the contributor's branch in the fork).gh pr create --title "the title" --body "$(cat <<'EOF'
the body
EOF
)"
The gh CLI must be authenticated against the contributor's GitHub account, not against prisma/prisma directly. The PR will open against prisma:main from the contributor's fork.
Return the PR URL.
Tell the user: a maintainer from @prisma/ORM-TS-Maintain will be auto-assigned via CODEOWNERS and is committed to a 5-business-day response window. If the change is large or controversial, expect a review thread before merge.
CONTRIBUTING.md rules. If they've changed since this skill was written, follow the file, not the skill.Signed-off-by: trailer. The DCO sign-off must be the contributor's own name and email matching the commit author.pnpm test:packages is red, fix it before pushing.SECURITY.md.Frequently asked questions
This skill is for external contributors to prisma/prisma who are using an LLM-based agent to author or finalize a PR. It is intentionally separate from the maintainer-facing create-pr skill: it does not depend on Linear access, internal plan/spec documents, or any private contex…
The source record exposes this install command: npx skills add https://github.com/prisma/prisma --skill "skills-contrib/contrib-pr". Inspect the command and pinned source before running it.
Static rules flagged exec-script in the source; the page lists the matching lines and excerpts.
Alternatives
Jamie-BitFlight/claude_skills
Shared Python 3.11+ development standards covering type safety (ty, native generics, Protocol, TypeIs), layered architecture, error handling, performance, identifier naming, UI/CLI patterns (Rich/Typer), testing requirements (pytest, 80% coverage, TDD), and quality gates. Activates when any Python skill or agent needs to apply shared standards for implementation, code review, refactoring, or test authoring.
VincentChuWaiChow/vanguard-frontier-agentic
Retrieves and analyzes Apex debug logs from a connected Salesforce org to identify governor-limit hits, SOQL N+1 patterns, unhandled exceptions, and async job failures. T1 read-only runtime — retrieves logs only, never executes code or mutates data. TRIGGER when: user asks to analyze an Apex log, debug a trigger failure, diagnose a governor limit hit, interpret a stack trace from a Salesforce org, or review a DEBUG log for performance issues. Trigger phrases: analyze apex log, debug this trigger
VincentChuWaiChow/vanguard-frontier-agentic
Executes Apex tests against a connected SANDBOX org via sf apex run test, parses results and coverage delta, identifies failures with stack traces, and suggests fixes. T1 read-only runtime (sandbox-only). Production org targets are HARD REFUSED before any API call. TRIGGER when: user wants to run Apex tests, execute a test class, check test coverage, diagnose test failures, or validate coverage before deployment. Trigger phrases: run apex tests, execute test class, test my changes, check test co
dotnet/skills
Grades a specified set of test methods individually and produces a concise table mapping each test (fully-qualified name) to a letter grade (A–F), a score band, and a one-line note — designed to be posted as a PR comment. Use when the caller wants per-test feedback on a curated list of methods (for example, the new or modified tests in a pull request), not a suite-wide audit. Polyglot: .NET, Python, TS/JS, Java, Go, Ruby, Rust, Swift, Kotlin, PowerShell, C++. Input is a list of test methods (or