prpm-json-best-practices

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a documentation resource for the PRPM (Prompt Package Manager) ecosystem, providing structural guidance for prpm.json manifests.
  • [SAFE]: Instructions concerning lifecycle scripts, such as prepublishOnly, describe legitimate development workflows (e.g., compiling TypeScript) within the context of the PRPM toolchain and include safety best practices such as avoiding long-running operations.
  • [SAFE]: All identified external resources, including documentation links (docs.prpm.dev), GitHub repositories (github.com/prpm/collections), and package scopes (@prpm/), are verified vendor-owned assets or placeholders for user configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 11:05 AM