astrale-domain
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a development framework and documentation set for the Astrale OS platform.
- [EXTERNAL_DOWNLOADS]: The instructions reference official vendor packages under the
@astrale-osnamespace and well-known libraries likezodand@tanstack/react-router. These are fetched using standard package managers (pnpm, npx). - [COMMAND_EXECUTION]: The skill documents the use of the
astrale-cli(referred to asastrale) for legitimate development tasks such as project initialization, deployment, and instance management. - [DATA_EXFILTRATION]: While the documentation describes how to perform network operations (e.g., using
fetchin integrations), these are presented as standard patterns for external API communication. The skill includes explicit warnings against logging secrets or hardcoding credentials. - [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting external data (e.g., webhooks). It provides clear guidance on authorization (Policies) and data validation (Zod) to mitigate risks associated with untrusted input.
Audit Metadata