config-prisma
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
init-prisma-backend.jsexecutes controlled shell commands to perform environmental setup.\n - Evidence: Uses
spawnSyncto runnpm installanddocker compose up.\n - Context: These operations are necessary for the skill's core functionality and are restricted to standard development tools within the project workspace.\n- [EXTERNAL_DOWNLOADS]: The skill triggers the download of software packages from the official npm registry.\n
- Evidence: The script adds and installs packages including
prisma,@prisma/client, andtsxvianpm install.\n - Context: Dependencies are fetched from a well-known service and represent standard industry tools.\n- [SAFE]: The skill implements secure practices for handling project configuration and credentials.\n
- Evidence: Database credentials and connection strings are managed via local
.envand.env.examplefiles.\n - Context: The script follows industry standards for secret management by avoiding hardcoded credentials and utilizing environment-based configuration.
Audit Metadata