skills/astrale-os/cli/astrale-domain/Gen Agent Trust Hub

astrale-domain

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a development framework and documentation set for the Astrale OS platform.
  • [EXTERNAL_DOWNLOADS]: The instructions reference official vendor packages under the @astrale-os namespace and well-known libraries like zod and @tanstack/react-router. These are fetched using standard package managers (pnpm, npx).
  • [COMMAND_EXECUTION]: The skill documents the use of the astrale-cli (referred to as astrale) for legitimate development tasks such as project initialization, deployment, and instance management.
  • [DATA_EXFILTRATION]: While the documentation describes how to perform network operations (e.g., using fetch in integrations), these are presented as standard patterns for external API communication. The skill includes explicit warnings against logging secrets or hardcoding credentials.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes patterns for ingesting external data (e.g., webhooks). It provides clear guidance on authorization (Policies) and data validation (Zod) to mitigate risks associated with untrusted input.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 03:04 PM