alchemy-provider
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard CLI tools (
pnpm,git,alchemy) for project initialization, dependency management, and executing integration tests. - [INDIRECT_PROMPT_INJECTION]: The skill involves ingesting data from external sources, which is a potential surface for indirect prompt injection.
- Ingestion points: Upstream cloud provider API specifications and live API responses (Step 1, Step 8).
- Boundary markers: Not explicitly defined in the provided files.
- Capability inventory: Ability to write and modify workspace source code, execute shell commands, and perform network operations.
- Sanitization: The process relies on schema-driven code generation and a mandatory 'review gate' (Step 9) where a fresh subagent audits the work using the rules in review.md.
Audit Metadata