building-restate-services
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official SDKs and developer tools from the author's (restatedev) verified package registries and repositories, such as
@restatedev/restate-sdkon NPM andrestate-sdkon PyPI. It also references trusted integrations from OpenAI and Google.\n- [COMMAND_EXECUTION]: The skill instructs the agent to utilize therestateCLI for project management, service registration, and invocation monitoring, as well ascurlfor local endpoint testing. These operations are essential to the developer workflow described in the skill.\n- [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface through the scanning of project manifest files (e.g.,package.json,go.mod) for context detection. It effectively mitigates this surface by providing explicit checklists for manual developer review and recommending strict input validation using libraries like Zod for service implementations.\n - Ingestion points: Automated detection of project SDKs and framework usage by scanning source and configuration files.\n
- Boundary markers: Includes 'Before-you-design' and 'Always verify' checklists to ensure human oversight of the generated architecture.\n
- Capability inventory: Invocation of local CLI tools and network requests to development server ports (8080/9070).\n
- Sanitization: Recommends leveraging Zod or Pydantic for strict schema validation of all external service inputs.
Audit Metadata