web-meta-framework-astro
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the use of standard framework installation and configuration commands such as
npx astro add reactandnpm create astro@latest, which are official Astro CLI tools for project setup. - [DATA_EXFILTRATION]: Patterns for handling sensitive data include best practices like reading API keys from
process.envand managing session tokens viaAstro.cookies. No evidence of credential exposure or unauthorized exfiltration was found. - [INDIRECT_PROMPT_INJECTION]: The skill describes ingesting untrusted data from Markdown files and external APIs. It mitigates this risk by emphasizing the use of Zod schemas in
src/content.config.tsfor build-time validation and type safety, as well as explicit response checking in dynamic routes. - [DYNAMIC_EXECUTION]: The skill uses Astro's native
render()function and content loaders. These are standard features of the framework used to process local content into static components during the build process. - [COMMAND_EXECUTION]: The examples include typical development CLI commands for package management and project initialization which are expected for this technical domain.
Audit Metadata