prisma-composer-core-concepts

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides architectural and conceptual documentation for the Prisma Composer framework. It details the interaction between services, modules, and resources.- [EXTERNAL_DOWNLOADS]: Mentions dependencies on official vendor packages including @prisma/composer, @prisma/composer-prisma-cloud, and @prisma/dev, as well as the third-party infrastructure engine alchemy and the effect library. These are documented as standard components of the deployment workflow.- [DYNAMIC_EXECUTION]: Describes the framework's mechanism for infrastructure convergence, which involves generating a TypeScript stack file (.prisma-composer/alchemy.run.ts) and executing it via a child process. This is a standard functional component of the documented IaC tool.- [COMMAND_EXECUTION]: Documents the intended use of the prisma-composer CLI for deploying, managing, and destroying application environments, as well as the use of standard development tools like bun and next build.- [INDIRECT_PROMPT_INJECTION]: Documentation notes that service.input() ingests external configuration data. Evidence chain: (1) Ingestion point: service.input() described in SKILL.md; (2) Boundary markers: Schema validation via Standard Schema is explicitly required; (3) Capability inventory: The system writes stack files and executes CLI commands; (4) Sanitization: Mandatory schema validation (e.g., Arktype) is described as the primary protection mechanism.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 02:00 AM
Security Audit — agent-trust-hub — prisma-composer-core-concepts