prisma-composer

Pass

Audited by Gen Agent Trust Hub on Aug 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
  • [SAFE]: The skill serves as a detailed instructional manual for the Prisma Composer framework. It does not contain executable code or hidden malicious instructions, focusing instead on teaching developers how to use the framework's features correctly.
  • [COMMAND_EXECUTION]: The documentation instructs the agent and user on using the prisma-composer CLI for development tasks like dev, log, deploy, and destroy. These commands are standard for the framework's lifecycle and are intended to be run in the user's local development or deployment environment.
  • [EXTERNAL_DOWNLOADS]: The skill describes interactions with Prisma Cloud for provisioning resources and mentions S3-compatible object storage. These references are directed at official vendor infrastructure and well-known service providers, consistent with the framework's purpose.
  • [DATA_EXPOSURE]: The skill explicitly covers secret management, advocating for the use of SecretString boxes and schema validation to handle credentials safely. It provides instructions for using environment variables like PRISMA_SERVICE_TOKEN and envSecret without hardcoding values or facilitating unauthorized exfiltration.
  • [NO_CODE]: The skill does not include any standalone scripts (Python, JavaScript, etc.) or binaries. Its functionality is derived entirely from the Markdown instructions provided to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 26, 2026, 06:00 PM
Security Audit — agent-trust-hub — prisma-composer