astrale-services
Warn
Audited by Socket on Jul 24, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS: the stated purpose matches service deployment and operations, but the skill centrally routes sensitive code, logs, and secrets through Astrale's own control plane instead of directly to Cloudflare, and the snippet lacks enough public provenance and auth-flow detail to fully verify that routing. No direct malware or installer abuse is visible, but the operational scope and third-party control plane make this medium risk.
Confidence: 77%Severity: 56%
Audit Metadata