astro-actions
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides standard documentation and code templates for the Astro Actions API, a common framework feature.
- [SAFE]: Implementation patterns strongly emphasize security best practices, such as mandatory input validation using Zod schemas to prevent processing of malformed or malicious data.
- [SAFE]: Guidance on authentication and error handling follows established secure development practices, such as verifying session cookies before executing server-side logic.
- [INDIRECT_PROMPT_INJECTION]: The skill manages the attack surface associated with processing external form data by recommending robust validation boundaries.
- Ingestion points: The skill defines handlers for
FormDataandJSONpayloads insrc/actions/index.tsas seen in multiple reference files. - Boundary markers: The recommended use of
input: z.object({...})provides a strict validation boundary for all ingested data. - Capability inventory: Handlers in the templates are shown performing typical server-side tasks such as database mutations and logging.
- Sanitization: All input is parsed, typed, and validated by Zod prior to processing in the handler logic, effectively sanitizing external content.
Audit Metadata