prisma-next-quickstart

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for project setup, file management, and database initialization. Specific commands include mkdir, mv, pnpm dlx prisma-next init, pnpm prisma-next db init, and contract emit. These are standard operations for the framework's intended purpose.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes package managers to fetch and execute official tools. It references pnpm dlx prisma-next init and npx createprisma to initialize the project environment. These resources are provided by the official Prisma vendor and are necessary for the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve reading local project configuration and schema files which could influence agent behavior. 1. Ingestion points: Reads prisma-next.config.ts, src/prisma/contract.prisma, src/prisma/db.ts, and .env files. 2. Boundary markers: None identified in the provided instructions. 3. Capability inventory: File system operations, file reads, and shell command execution. 4. Sanitization: No explicit validation of the ingested file content is mentioned, which is common for developer-oriented tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 02:51 PM
Security Audit — agent-trust-hub — prisma-next-quickstart