ash-framework
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides architectural guidance and 'Iron Laws' for the Ash Framework, focusing on security best practices like proper actor/scope handling to prevent unauthorized data access or row-level policy bypass.
- [EXTERNAL_DOWNLOADS]: The skill utilizes the WebFetch tool to retrieve documentation from hexdocs.pm. hexdocs.pm is the official and well-known service for hosting Elixir package documentation.
- [COMMAND_EXECUTION]: References standard Elixir/Ash CLI commands (e.g.,
mix ash.gen.resource,mix ash.codegen,mix ash.migrate) for routine development tasks such as code generation and database migrations. - [SAFE]: The skill includes instructions to ingest documentation from external sources (hexdocs.pm). Although this is an attack surface for indirect prompt injection, the risk is mitigated as the source is a well-known technology repository.
Audit Metadata