astro
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project configuration files and source code which are potentially untrusted ingestion points.
- Ingestion points: The skill inspects package.json, astro.config.mjs, and other project files via system commands like cat and ls.
- Boundary markers: The instructions include explicit scoping and 'Read first' directives to maintain context and prevent the use of deprecated APIs.
- Capability inventory: Uses basic file inspection and standard Astro development commands (npx astro).
- Sanitization: The skill follows structured workflows for code review and stack detection to ensure consistent processing of user-provided content.
Audit Metadata