astrofy-footer
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
astrofyCLI tool (astrofy check --category footer) to perform validation of the footer configuration. This is a local operation scoped to the project environment. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface by processing content from local project files.
- Ingestion points: Ingests data from
Footer.astro, link configuration groups, and.astrofy/config/paths.json. - Boundary markers: No explicit delimiters or instructions to ignore embedded prompts are provided in the documentation.
- Capability inventory: Includes the ability to execute the
astrofyCLI command for footer verification. - Sanitization: The skill emphasizes manual and automated verification of link destinations but does not describe input sanitization for prompt-like patterns.
Audit Metadata