managing-astro-local-env
Pass
Audited by Gen Agent Trust Hub on Feb 16, 2026
Risk Level: LOWCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION] (LOW): The skill provides instructions for the agent to run local system commands using the astro CLI and docker. These commands are used for container management, log inspection, and environment troubleshooting. Evidence: astro dev start, astro dev bash, docker system prune in SKILL.md.
- [CREDENTIALS_UNSAFE] (INFO): The skill documents the default credentials admin / admin for the local Airflow webserver. These are the well-known defaults for the Astro CLI and do not constitute a leak of sensitive user information.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill includes instructions to read container logs which may contain untrusted data processed by the Airflow environment. 1. Ingestion points: astro dev logs (standard output from containers) 2. Boundary markers: Absent 3. Capability inventory: Local command execution (astro dev, docker) 4. Sanitization: Absent
Audit Metadata