astro-dev
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill utilizes official scaffolding tools to initialize projects.
- Evidence:
scripts/init_astro_cloudflare.shusesnpm create cloudflare@latest. - Evidence:
scripts/init_astro_standard.shusesnpm create astro@latest. - [TRUST-SCOPE-RULE]: These actions involve trusted sources (NPM registry, Cloudflare, Astro) and are consistent with the primary skill purpose.
- [COMMAND_EXECUTION] (SAFE): Scripts perform local file system operations to organize the project structure.
- Evidence:
scripts/setup_content_collection.pycreates directories and files usingPath.mkdirandPath.write_text. - Context: The execution is confined to the local project directory for scaffolding purposes.
- [DYNAMIC_EXECUTION] (SAFE): Scripts generate code files from predefined templates.
- Evidence:
scripts/setup_content_collection.pyinterpolates a user-provided collection name into a TypeScript template forsrc/content/config.ts. - Risk Assessment: These actions are standard for scaffolding tools and do not involve untrusted remote sources.
Audit Metadata