40Medium
The skill lacks defined tool constraints and improperly accesses sensitive environment variables, posing a significant risk of unauthorized data exfiltration and arbitrary command execution.
Skill Info
Nameprisma/prisma-next/prisma-next-quickstart
Registrygithub
Versiond76a792023e3
PURLpkg:github/prisma/prisma-next@d76a792023e3?skill=prisma-next-quickstart
Stars381
Installs175
Source
Install
This skill has findings worth reviewing before installing.
GitHub
175 installs
Skills.shDocs
npx skills add https://github.com/prisma/prisma-nextAssessments (3)
AI Agent Traps ↗Access to sensitive environment variables detectedmediumcredential theftAML.T0055AML.T0037LLM02:2025
Access to sensitive environment variables detected (seen 3 times in this file at lines 257, 292, 335)
100% confidenceline 257
$DATABASE_URL
Missing licenseinfopolicy violation
Skill does not specify a license field. Specifying a license helps users understand usage terms.
100% confidence
Missing or insufficient descriptioninfopolicy violation
Skill description is empty or too short. A clear description helps users evaluate the skill's purpose.
100% confidence
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/github/prisma/prisma-next/prisma-next-quickstart)HTML
<a href="https://mondoo.com/ai-agent-security/skills/github/prisma/prisma-next/prisma-next-quickstart"><img src="https://mondoo.com/ai-agent-security/api/badge/github/prisma/prisma-next/prisma-next-quickstart.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/github/prisma/prisma-next/prisma-next-quickstart.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow