astrofy-config
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill focuses on secure configuration management within the Astro framework, providing clear distinctions between public and server-side data.
- [SAFE]: Includes explicit safety warnings for the AI agent, such as advising against importing TypeScript files during project inspection to avoid unintended code execution.
- [SAFE]: Emphasizes security best practices for secret management, instructing the use of
astro:envand schema definitions to prevent credentials from being leaked into client-side bundles via thePUBLIC_prefix. - [EXTERNAL_DOWNLOADS]: References official documentation from well-known sources including Astro (
docs.astro.build) and the Ajv JSON Schema validator (ajv.js.org). These are trusted technology providers and do not pose a security risk. - [COMMAND_EXECUTION]: Instructs the use of
astrofy check, a specialized CLI tool for the Astrofy project environment, to validate configuration structure and security compliance (e.g.,config.secretsrule).
Audit Metadata