do-astro
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documents standard use of the
npx astroCLI for development workflows, including building projects, starting development servers, and running error checks. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and install official Astro adapters and integrations from public registries. It also references official documentation hosted atdocs.astro.buildand official source code on GitHub. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process Astro project files, creating a potential surface for indirect prompt injection if malicious content is present in the codebase.
- Ingestion points: Files matching
*.astroandastro.config.*(SKILL.md). - Boundary markers: None identified.
- Capability inventory: Execution of
npx astroCLI commands (SKILL.md). - Sanitization: None identified.
Audit Metadata