zenstack-project-setup
Pass
Audited by Gen Agent Trust Hub on Jun 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer documentation for the ZenStack V3 toolkit.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install npm packages including vendor resources (@zenstackhq/cli, @zenstackhq/schema, @zenstackhq/orm) and established database libraries (pg, mysql2, better-sqlite3).
- [COMMAND_EXECUTION]: The skill describes using the zen CLI and npm/npx for project setup and development tasks such as code generation and database migrations.
- [SAFE]: The skill describes a workflow involving the processing of schema files (.zmodel). While this presents an indirect prompt injection surface, it is consistent with the intended primary purpose of the tool. Evidence: 1. Ingestion points: zenstack/schema.zmodel. 2. Boundary markers: Absent. 3. Capability inventory: zen CLI (generate, db push, migrate), npm/npx. 4. Sanitization: Not specified.
Audit Metadata