astrofy-blog
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages content within Astro MDX collections, which introduces an ingestion surface for untrusted data if blog posts are sourced from external contributors.
- Ingestion points: MDX content files and collection schemas defined in
SKILL.mdandreferences/technical.md. - Boundary markers: The skill recommends using Zod schemas for data validation and centralized publication filters to distinguish between drafts and public content.
- Capability inventory: File system read access for project configuration and execution of the
astrofyverification tool. - Sanitization: Implementation of publication status checks (drafts vs. published) and schema validation via Zod loader in
src/content.config.ts. - [COMMAND_EXECUTION]: The skill utilizes a command-line utility
astrofyto perform category-specific project checks. - Evidence: The instruction to run
astrofy check --category blogappears inSKILL.mdandexamples/cases.md. This tool is part of the developer workflow for validating the blog structure and publication rules within the local environment.
Audit Metadata