alchemy-common-errors
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and diagnose external data, such as API error responses and network logs, which could theoretically contain malicious instructions if the upstream provider or an intercepted response is compromised.
- Ingestion points: The skill ingests network request logs, Alchemy API responses, and correlation IDs from
SKILL.mdinstructions. - Boundary markers: No explicit delimiter markers are used for external data inputs in the prompt instructions.
- Capability inventory: The skill uses
Bash(curl:*),Read,Write, andEdittools to perform diagnostics and modify project files. - Sanitization: The instructions include mandatory sanitization steps, specifically requiring the removal of API keys, private keys, and other sensitive parameters before processing logs or escalating issues.
Audit Metadata