astro
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as an educational resource for the Astro framework. All code snippets and commands follow official documentation patterns for project initialization, component structure, and routing.
- [COMMAND_EXECUTION]: The instructions include standard shell commands for Node.js development, such as
npm create astroandnpx astro add. These are well-known utility commands for the Astro ecosystem and are used in their intended context. - [DATA_EXPOSURE_AND_EXFILTRATION]: The skill provides security best practices, specifically warning against putting secrets in client-facing templates and advising on the correct use of environment variables with the
PUBLIC_prefix to prevent accidental exposure. - [INDIRECT_PROMPT_INJECTION]: While the skill describes processing external content (Markdown/MDX), it includes explicit warnings about sanitizing user-supplied content when using dangerous attributes like
set:htmlto prevent cross-site scripting (XSS) or injection attacks.
Audit Metadata