astro-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the use of standard package management commands for project initialization and adapter setup.
- Evidence: Use of
npx astro add,npm install wrangler@4, andnpx vercel deployacross multiple files includingreferences/cloudflare-adapter.mdandreferences/templates/vercel-setup.md. - [INDIRECT_PROMPT_INJECTION]: The skill provides code templates that ingest untrusted data from external sources, creating a potential surface for indirect injection if data is processed by an LLM downstream.
- Ingestion points: Data enters the context via cookies and headers in
references/edge-middleware.mdandreferences/templates/vercel-setup.md, and through database/KV results inreferences/templates/cloudflare-setup.md. - Boundary markers: None explicitly defined in the provided code snippets to delimit external data from instructions.
- Capability inventory: The skill facilitates file/state changes via
CACHE.putandDB.prepareinreferences/templates/cloudflare-setup.md, and project configuration throughnpxcommands during setup. - Sanitization: The snippets lack explicit validation or sanitization logic for incoming request data (cookies/headers) beyond standard
JSON.stringifyfor output.
Audit Metadata