astrofy-blog-post
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
astrofy checkcommand to verify the generated blog post route and readability. This is a local diagnostic tool used within the development workflow. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from content collections (MDX files) to derive metadata and render post bodies. It includes a security guideline stating that content without a controlled origin should not be processed by the compiler, mitigating risks associated with untrusted data.
- [DYNAMIC_EXECUTION]: The skill utilizes the Astro framework's rendering API (
render(entry)fromastro:content) to dynamically compile and display MDX content. This is a standard and expected functionality for a blog-post generation tool.
Audit Metadata