astro-starlight
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official Astro and Starlight installation methods and configuration patterns. All external dependencies listed are well-known packages within the Starlight ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local documentation files (Markdown/MDX) and project configuration scripts as part of its 'explore-codebase' workflow. This is standard behavior for a documentation-focused skill and does not introduce malicious capabilities. Mandatory Evidence Chain: (1) Ingestion points: local file reads in
src/content/docs/and project config files; (2) Boundary markers: uses standard markdown code block delimiters; (3) Capability inventory: limited to file modifications and package installations for project setup; (4) Sanitization: none, as it operates on local developer-controlled content.
Audit Metadata