astrofy-i18n
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides instructions for configuring i18n logic in Astro projects, including managing translation equivalencies and verifying routes. It interacts with standard project files such as
package.json, lockfiles, and.astrofy/config/paths.jsonto determine the project environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific data which serves as a potential attack surface for indirect prompt injection.
- Ingestion points: The agent is instructed to read local configuration files (
package.json,.astrofy/config/paths.json), dependency lockfiles,node_modules, and content slugs from the project directory. - Boundary markers: The instructions do not define specific boundary markers or delimiters to isolate content read from these files.
- Capability inventory: The skill utilizes a local command-line tool,
astrofy check, to validate routing configurations. - Sanitization: There is no mention of sanitization or validation logic for the content ingested from the project files.
Audit Metadata