config-prisma

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script init-prisma-backend.js executes controlled shell commands to perform environmental setup.\n
  • Evidence: Uses spawnSync to run npm install and docker compose up.\n
  • Context: These operations are necessary for the skill's core functionality and are restricted to standard development tools within the project workspace.\n- [EXTERNAL_DOWNLOADS]: The skill triggers the download of software packages from the official npm registry.\n
  • Evidence: The script adds and installs packages including prisma, @prisma/client, and tsx via npm install.\n
  • Context: Dependencies are fetched from a well-known service and represent standard industry tools.\n- [SAFE]: The skill implements secure practices for handling project configuration and credentials.\n
  • Evidence: Database credentials and connection strings are managed via local .env and .env.example files.\n
  • Context: The script follows industry standards for secret management by avoiding hardcoded credentials and utilizing environment-based configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 04:48 PM
Security Audit — agent-trust-hub — config-prisma