astrofy-forms

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill directs the agent to utilize the astrofy check --category forms command as a diagnostic utility to verify the project's form implementation against accessibility and delivery rules.
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the processing of untrusted external data through form submissions and file uploads. It includes mandatory security guidelines to mitigate risks, requiring server-side validation for all inputs, filename sanitization to prevent path traversal, and the use of safe text rendering to prevent cross-site scripting (XSS).
  • [EXTERNAL_DOWNLOADS]: The skill references external technical documentation from trusted entities, including the official Astro project documentation, the Mozilla Developer Network (MDN), and the W3C Web Accessibility Initiative (WAI).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 12:27 AM