alchemy
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to read and process project files such as
alchemy.run.ts,package.json, and lockfiles to determine deployment configurations. This creates an attack surface where malicious instructions within these files could influence agent behavior. - Ingestion points: Project files including
alchemy.run.ts,package.json, and various lockfiles are read to understand the project structure and requirements. - Boundary markers: The instructions do not specify the use of delimiters or specific warnings when the agent ingests untrusted content from these files.
- Capability inventory: The agent is authorized to execute shell commands (
bun alchemy), modify files, and perform network operations via Effect-native HTTP clients. - Sanitization: There is no requirement mentioned for sanitizing or validating the contents of these user-provided files before processing.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources and dependencies necessary for infrastructure management.
- Fetches the
alchemy-run/alchemy-effectrepository as a Git submodule for reference and examples. - Downloads the core
alchemyandeffectpackages from standard registries using the Bun package manager. - Retrieves a list of examples from the official GitHub API (
api.github.com). - These downloads target well-known and expected services related to the tool's primary purpose.
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands to perform infrastructure tasks.
- Runs Alchemy CLI tools for development, deployment, and destruction of resources (
bun alchemy dev,bun alchemy deploy). - Utilizes standard development tools like
git,bun tsc, andrgfor project maintenance and inspection. - [DYNAMIC_EXECUTION]: The skill involves the generation and subsequent execution of infrastructure-as-code scripts.
- The agent is instructed to create or update
alchemy.run.tsfiles based on provided templates. - These scripts are executed by the Alchemy engine during the deployment process to converge cloud resources.
Audit Metadata