alchemy
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches content from official vendor sites and well-known service registries to maintain documentation and examples.
- Evidence: Fetches directory listings from the GitHub API at
api.github.com/repos/alchemy-run/alchemy-effectto sync examples. - Evidence: Initializes git submodules from the official
alchemy-run/alchemy-effectrepository. - Evidence: Recommends installing standard NPM packages like
alchemyandeffectfrom public registries. - [COMMAND_EXECUTION]: The skill uses local CLI commands to manage the infrastructure development lifecycle, which is standard behavior for deployment tools.
- Evidence: Executes
bun alchemy deploy,bun alchemy dev, andbun alchemy destroyto manage cloud resources. - Evidence: Uses
bun tsc -bandbun build:cleanfor project compilation and maintenance. - [INDIRECT_PROMPT_INJECTION]: As an infrastructure management tool, the skill naturally ingests untrusted configuration data which represents a baseline surface for indirect prompt injection.
- Ingestion points: The agent reads
alchemy.run.tsconfiguration files, package manifests, and environment variables. - Boundary markers: The skill does not explicitly define delimiters for user-provided configuration strings in its instructions.
- Capability inventory: The skill utilizes file system access, network operations via the Effect
HttpClientplatform, and shell command execution through thealchemyCLI. - Sanitization: No specific sanitization or escaping logic for user-provided resource identifiers is detailed in the skill's instructions.
Audit Metadata