keystatic-setup
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill guides the installation of recognized packages including
@keystatic/core,@keystatic/astro, and official Astro integrations from the npm registry. These are well-known resources provided by the Keystatic and Astro teams. - [COMMAND_EXECUTION]: Uses standard development tools like
npm installandnpx astro addto initialize the CMS environment and add required framework integrations. - [DATA_EXPOSURE_AND_EXFILTRATION]: Correctly identifies the need for environment variables (
KEYSTATIC_GITHUB_*) for managing secrets in GitHub Cloud mode, following security best practices for avoiding hardcoded credentials. - [INDIRECT_PROMPT_INJECTION]: The skill involves reading project collection schemas to generate matching CMS configuration.
- Ingestion points: Project configuration file
src/content.config.tsand directory structure. - Boundary markers: None explicitly defined in the generation instructions.
- Capability inventory: Filesystem writes to
keystatic.config.tsandastro.config.mjs, plus dependency installation. - Sanitization: None specified for the interpolated collection labels.
Audit Metadata