The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides links to official Astro documentation (docs.astro.build) and instructions for using the official Astro Docs MCP server (mcp.docs.astro.build). It also includes templates that utilize well-known services like Google Fonts through the Astro Fonts API.
[INDIRECT_PROMPT_INJECTION]: As a development assistant, the skill is designed to ingest and process local project files (e.g., package.json, .astro files, and content collections). While this presents a theoretical attack surface for indirect prompt injection from repository content, the skill explicitly instructs the agent to follow safety practices, such as using sanitize-html for RSS content and enabling CSRF protections.
[SAFE]: The skill documents legitimate development workflows for the Astro framework. It contains no evidence of credential exfiltration, persistence mechanisms, or unauthorized privilege escalation. The instructions for handling sensitive data (e.g., sessions and environment variables) align with industry-standard security practices.

astro-dev