astrale-services

Warn

Audited by Socket on Jul 24, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the stated purpose matches service deployment and operations, but the skill centrally routes sensitive code, logs, and secrets through Astrale's own control plane instead of directly to Cloudflare, and the snippet lacks enough public provenance and auth-flow detail to fully verify that routing. No direct malware or installer abuse is visible, but the operational scope and third-party control plane make this medium risk.

Confidence: 77%Severity: 56%
Audit Metadata
Analyzed At
Jul 24, 2026, 10:28 AM
Package URL
pkg:socket/skills-sh/astrale-os%2Fcli%2Fastrale-services%2F@b554f80c6f672ff0718836982c42c3f5acb7c255985065f519afc4b138bf66bd
Security Audit — socket — astrale-services