prisma-composer-core-concepts
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural and conceptual documentation for the Prisma Composer framework. It details the interaction between services, modules, and resources.- [EXTERNAL_DOWNLOADS]: Mentions dependencies on official vendor packages including
@prisma/composer,@prisma/composer-prisma-cloud, and@prisma/dev, as well as the third-party infrastructure enginealchemyand theeffectlibrary. These are documented as standard components of the deployment workflow.- [DYNAMIC_EXECUTION]: Describes the framework's mechanism for infrastructure convergence, which involves generating a TypeScript stack file (.prisma-composer/alchemy.run.ts) and executing it via a child process. This is a standard functional component of the documented IaC tool.- [COMMAND_EXECUTION]: Documents the intended use of theprisma-composerCLI for deploying, managing, and destroying application environments, as well as the use of standard development tools likebunandnext build.- [INDIRECT_PROMPT_INJECTION]: Documentation notes thatservice.input()ingests external configuration data. Evidence chain: (1) Ingestion point:service.input()described inSKILL.md; (2) Boundary markers: Schema validation via Standard Schema is explicitly required; (3) Capability inventory: The system writes stack files and executes CLI commands; (4) Sanitization: Mandatory schema validation (e.g., Arktype) is described as the primary protection mechanism.
Audit Metadata