web-meta-framework-astro

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill documents the use of standard framework installation and configuration commands such as npx astro add react and npm create astro@latest, which are official Astro CLI tools for project setup.
  • [DATA_EXFILTRATION]: Patterns for handling sensitive data include best practices like reading API keys from process.env and managing session tokens via Astro.cookies. No evidence of credential exposure or unauthorized exfiltration was found.
  • [INDIRECT_PROMPT_INJECTION]: The skill describes ingesting untrusted data from Markdown files and external APIs. It mitigates this risk by emphasizing the use of Zod schemas in src/content.config.ts for build-time validation and type safety, as well as explicit response checking in dynamic routes.
  • [DYNAMIC_EXECUTION]: The skill uses Astro's native render() function and content loaders. These are standard features of the framework used to process local content into static components during the build process.
  • [COMMAND_EXECUTION]: The examples include typical development CLI commands for package management and project initialization which are expected for this technical domain.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 07:46 PM