keystatic-setup

Pass

Audited by Gen Agent Trust Hub on Aug 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill guides the installation of recognized packages including @keystatic/core, @keystatic/astro, and official Astro integrations from the npm registry. These are well-known resources provided by the Keystatic and Astro teams.
  • [COMMAND_EXECUTION]: Uses standard development tools like npm install and npx astro add to initialize the CMS environment and add required framework integrations.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: Correctly identifies the need for environment variables (KEYSTATIC_GITHUB_*) for managing secrets in GitHub Cloud mode, following security best practices for avoiding hardcoded credentials.
  • [INDIRECT_PROMPT_INJECTION]: The skill involves reading project collection schemas to generate matching CMS configuration.
  • Ingestion points: Project configuration file src/content.config.ts and directory structure.
  • Boundary markers: None explicitly defined in the generation instructions.
  • Capability inventory: Filesystem writes to keystatic.config.ts and astro.config.mjs, plus dependency installation.
  • Sanitization: None specified for the interpolated collection labels.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 25, 2026, 07:52 AM
Security Audit — agent-trust-hub — keystatic-setup