prismatic-api
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive reference documentation for the Prismatic platform API, including GraphQL queries and CLI commands.
- [EXTERNAL_DOWNLOADS]: References official @prismatic-io/prism NPM package and Prismatic API endpoints, which are legitimate resources from the skill vendor.
- [COMMAND_EXECUTION]: Documents the use of the prism CLI and MCP tools for platform management, which is appropriate for the skill's stated purpose.
- [CREDENTIALS_UNSAFE]: No hardcoded secrets were detected. The skill uses placeholders and teaches secure authentication practices using environment variables and token exchange.
- [PROMPT_INJECTION]: The skill documents how to fetch and process data from external API endpoints (logs, customer names). While this presents an indirect prompt injection surface, the skill promotes the use of parameterized GraphQL variables and provides no instructions that bypass agent safety guidelines.
Audit Metadata