astro-framework
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data access were detected. The skill acts as a standard documentation resource for the Astro framework.- [COMMAND_EXECUTION]: The skill includes shell commands for project initialization and dependency management using package managers such as npm, pnpm, and bun. These commands are legitimate for setting up a web development environment.- [PROMPT_INJECTION]: The documentation addresses the ingestion of external data (e.g., via Astro.request and cookies), which creates a surface for indirect prompt injection. However, the skill promotes safe practices by demonstrating schema validation with Zod and providing explicit warnings for the set:html directive.
Audit Metadata