astro-db
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download and install the Turso CLI using a shell pipe from the official Turso domain:
curl -sSfL https://get.tur.so/install.sh | bash. This targets a well-known service domain. - [COMMAND_EXECUTION]: Instructions include the use of shell commands for database management and synchronization, such as
astro db pushandastro db execute, which are standard operations for the Astro DB framework. - [INDIRECT_PROMPT_INJECTION]: The skill implements patterns for handling untrusted user input via Astro Actions in its templates.
- Ingestion points: Form data submitted to action handlers defined in
references/actions-integration.mdandreferences/templates/crud-example.md. - Boundary markers: While not explicitly using prompt delimiters, the skill utilizes structured TypeScript interfaces and Zod schemas to constrain the data.
- Capability inventory: The skill possesses the capability to perform database write operations, including inserting, updating, and deleting records in the application database.
- Sanitization: Every provided example of data ingestion implements strict input validation using the Zod library to sanitize and validate data types before they reach the database layer.
Audit Metadata