astro-content
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of structured data from both local and remote sources, which is the primary purpose of the Astro Content Layer.
- Ingestion points: Data is retrieved from local directories via
glob(), local files viafile(), and external APIs through custom loaders insrc/content.config.ts. - Boundary markers: The skill mandates the implementation of Zod schemas to define data structures, which acts as a validation boundary for incoming content.
- Capability inventory: The implementation involves filesystem read access for local files and network capabilities via
fetchfor remote data retrieval. - Sanitization: Zod 4 validation is an enforced best practice in the skill guidelines to ensure entry data integrity.
- [EXTERNAL_DOWNLOADS]: The skill references standard mechanisms for fetching remote data and installing dependencies.
- The custom loader template demonstrates fetching content from a remote API endpoint using
fetch(). - The documentation includes standard setup procedures for official integrations using the
npxpackage runner. - [COMMAND_EXECUTION]: The skill documentation includes standard CLI usage for environment setup.
- Mentions the use of
npx astro add mdxto add official Astro integrations. - Refers to the
astro synccommand for generating project-specific TypeScript types.
Audit Metadata