astrale-domain
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard package managers like
npxandpnpmto fetch official platform tools (e.g.,create-astrale-domain) and library dependencies (e.g.,@astrale-os/kernel-core) from the public npm registry. - [REMOTE_CODE_EXECUTION]: Instructions include scaffolding projects via
npx create-astrale-domain, which is the intended and standard initialization path for the vendor's ecosystem. - [CREDENTIALS_UNSAFE]: The skill promotes secure secret management by instructing users to use environment-specific files (
.env.dev,.env.prod) that are not committed to version control, and leverages platform-provided encrypted stores for production secrets. - [PROMPT_INJECTION]: The guide includes security advice for developers, specifically recommending HTML-escaping of stored strings to prevent Cross-Site Scripting (XSS) when rendering public views.
Audit Metadata