astrofy-config

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill focuses on secure configuration management within the Astro framework, providing clear distinctions between public and server-side data.
  • [SAFE]: Includes explicit safety warnings for the AI agent, such as advising against importing TypeScript files during project inspection to avoid unintended code execution.
  • [SAFE]: Emphasizes security best practices for secret management, instructing the use of astro:env and schema definitions to prevent credentials from being leaked into client-side bundles via the PUBLIC_ prefix.
  • [EXTERNAL_DOWNLOADS]: References official documentation from well-known sources including Astro (docs.astro.build) and the Ajv JSON Schema validator (ajv.js.org). These are trusted technology providers and do not pose a security risk.
  • [COMMAND_EXECUTION]: Instructs the use of astrofy check, a specialized CLI tool for the Astrofy project environment, to validate configuration structure and security compliance (e.g., config.secrets rule).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:27 AM