build-astro-site
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
pnpm create astro@latestto initialize projects. This process fetches official project templates and initialization scripts from the public npm registry (registry.npmjs.org), which is a well-known and trusted service. - [COMMAND_EXECUTION]: The skill guides the agent through standard web development workflows involving the execution of commands like
pnpm check,pnpm build, andpnpm install. These are used for linting, building static assets, and managing dependencies. - [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface where the agent processes external content files (Markdown and MDX). It mitigates this risk by enforcing the use of Zod schemas in
content.config.tsfor strict data validation, type checking, and boundary enforcement for all ingested content.
Audit Metadata