dev-prismalisted

# Prisma ORM (pointer) Prisma publishes the canonical agent skill at [`prisma/skills`](https://github.com/prisma/skills) — maintained by the Prisma team, in sync with v7 (ESM-only, driver adapters, `prisma.config.ts`). The vendor reference stays current with every release; the prior foundation skill (418 lines) drifted on each Prisma version bump. ## Delegate to the vendor skill ```bash # Prisma's preferred path (verify on their README): npx skills add prisma/skills # Fallback — clone and copy: git clone --depth 1 https://github.com/prisma/skills ~/dev/vendor-skills/prisma # Skill content lives in CLAUDE.md / AGENTS.md per their convention. ``` Recipe entry: [`docs/recipes/recommended-vendor-skills.md`](../../../docs/recipes/recommended-vendor-skills.md) §"Prisma — `prisma/skills`". Reduction rationale: [`specs/foundation-positioning-review/spec.md`](../../../specs/foundation-positioning-review/spec.md) Wave 1. ## Foundation-unique angle preserved: cross-cutting discipline The vendor covers the Prisma API surface. The foundation enforces version-agnostic conventions that survive across releases: - **Security**: never `select: { passwordHash: true }` or any sensitive column without explicit need; default to `select` over `include` for security + perf — cross-ref `.claude/rules/security.md`. - **TDD with a real DB**: integration tests hit a real test database (Docker Compose pattern), never a Prisma mock — cross-ref the `dev-tdd` skill. - **Postgres interop**: if the st