astro-dev

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill utilizes official scaffolding tools to initialize projects.
  • Evidence: scripts/init_astro_cloudflare.sh uses npm create cloudflare@latest.
  • Evidence: scripts/init_astro_standard.sh uses npm create astro@latest.
  • [TRUST-SCOPE-RULE]: These actions involve trusted sources (NPM registry, Cloudflare, Astro) and are consistent with the primary skill purpose.
  • [COMMAND_EXECUTION] (SAFE): Scripts perform local file system operations to organize the project structure.
  • Evidence: scripts/setup_content_collection.py creates directories and files using Path.mkdir and Path.write_text.
  • Context: The execution is confined to the local project directory for scaffolding purposes.
  • [DYNAMIC_EXECUTION] (SAFE): Scripts generate code files from predefined templates.
  • Evidence: scripts/setup_content_collection.py interpolates a user-provided collection name into a TypeScript template for src/content/config.ts.
  • Risk Assessment: These actions are standard for scaffolding tools and do not involve untrusted remote sources.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 06:10 PM