prisma-composer
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [SAFE]: The skill serves as a detailed instructional manual for the Prisma Composer framework. It does not contain executable code or hidden malicious instructions, focusing instead on teaching developers how to use the framework's features correctly.
- [COMMAND_EXECUTION]: The documentation instructs the agent and user on using the
prisma-composerCLI for development tasks likedev,log,deploy, anddestroy. These commands are standard for the framework's lifecycle and are intended to be run in the user's local development or deployment environment. - [EXTERNAL_DOWNLOADS]: The skill describes interactions with Prisma Cloud for provisioning resources and mentions S3-compatible object storage. These references are directed at official vendor infrastructure and well-known service providers, consistent with the framework's purpose.
- [DATA_EXPOSURE]: The skill explicitly covers secret management, advocating for the use of
SecretStringboxes and schema validation to handle credentials safely. It provides instructions for using environment variables likePRISMA_SERVICE_TOKENandenvSecretwithout hardcoding values or facilitating unauthorized exfiltration. - [NO_CODE]: The skill does not include any standalone scripts (Python, JavaScript, etc.) or binaries. Its functionality is derived entirely from the Markdown instructions provided to the agent.
Audit Metadata