skills/darkmatter/skills/alchemy/Gen Agent Trust Hub

alchemy

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to read and process project files such as alchemy.run.ts, package.json, and lockfiles to determine deployment configurations. This creates an attack surface where malicious instructions within these files could influence agent behavior.
  • Ingestion points: Project files including alchemy.run.ts, package.json, and various lockfiles are read to understand the project structure and requirements.
  • Boundary markers: The instructions do not specify the use of delimiters or specific warnings when the agent ingests untrusted content from these files.
  • Capability inventory: The agent is authorized to execute shell commands (bun alchemy), modify files, and perform network operations via Effect-native HTTP clients.
  • Sanitization: There is no requirement mentioned for sanitizing or validating the contents of these user-provided files before processing.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of external resources and dependencies necessary for infrastructure management.
  • Fetches the alchemy-run/alchemy-effect repository as a Git submodule for reference and examples.
  • Downloads the core alchemy and effect packages from standard registries using the Bun package manager.
  • Retrieves a list of examples from the official GitHub API (api.github.com).
  • These downloads target well-known and expected services related to the tool's primary purpose.
  • [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands to perform infrastructure tasks.
  • Runs Alchemy CLI tools for development, deployment, and destruction of resources (bun alchemy dev, bun alchemy deploy).
  • Utilizes standard development tools like git, bun tsc, and rg for project maintenance and inspection.
  • [DYNAMIC_EXECUTION]: The skill involves the generation and subsequent execution of infrastructure-as-code scripts.
  • The agent is instructed to create or update alchemy.run.ts files based on provided templates.
  • These scripts are executed by the Alchemy engine during the deployment process to converge cloud resources.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 08:29 PM