astro-7
Warn
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [METADATA_POISONING]: The skill is centered around 'Astro 7' and technical specifications (e.g., version 7.0.9, 'tsgo' compiler) that do not exist in the official Astro ecosystem. This deceptive metadata could cause an agent to operate under false assumptions about the framework's capabilities, security features, or breaking changes.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the analysis and modification of user-supplied codebases, creating a surface for indirect prompt injection. Untrusted data from project files (routes, components, configurations) is ingested into the agent's context without mentioned boundary markers or sanitization, potentially allowing malicious code in a project to influence the agent's behavior.\n- [EXTERNAL_DOWNLOADS]: The skill references standard Astro installation and upgrade commands (
npm create astro@latest,npx @astrojs/upgrade) and official integration packages (e.g.,@astrojs/node,@astrojs/cloudflare). These are verified resources from a well-known vendor and are documented here as part of the skill's intended functionality.
Audit Metadata