astro-security
Installation
SKILL.md
Astro Security
Purpose
Protect Astro sites from the standard web threat model: injection and XSS, secret leakage, CSRF on state-changing operations, and missing security headers — with the native Astro surface understood (server/client boundary, set:html, env vars).
When to Use
Activate when the task involves:
- rendering user content (comments, CMS fields, search terms)
- forms, actions, or endpoints accepting input
- secrets and environment variables
- security headers and CSP
- auth/session hardening (with
astro-auth) - security review or audit