astrofy-header
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a local CLI tool,
astrofy, to perform validation checks on the header's accessibility and geometry settings. - [EXTERNAL_DOWNLOADS]: The skill refers to official implementation guidelines from trusted sources including the W3C and Tailwind CSS to ensure standards compliance.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local project files which creates a potential surface for indirect prompt injection.
- Ingestion points: The skill reads
Header.astroand.astrofy/config/paths.jsonto configure the component. - Boundary markers: No specific delimiters or instructions to ignore embedded commands are used during file ingestion.
- Capability inventory: The skill has the capability to execute the
astrofy checkcommand on the host system. - Sanitization: The instructions do not specify any sanitization or validation of the content read from the local project files before processing.
Audit Metadata