astrofy-forms
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to utilize the
astrofy check --category formscommand as a diagnostic utility to verify the project's form implementation against accessibility and delivery rules. - [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of untrusted external data through form submissions and file uploads. It includes mandatory security guidelines to mitigate risks, requiring server-side validation for all inputs, filename sanitization to prevent path traversal, and the use of safe text rendering to prevent cross-site scripting (XSS).
- [EXTERNAL_DOWNLOADS]: The skill references external technical documentation from trusted entities, including the official Astro project documentation, the Mozilla Developer Network (MDN), and the W3C Web Accessibility Initiative (WAI).
Audit Metadata