Is astro safe to install?

SaferSkills independently audited astro (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.

CategoryWeightCategory scoreContribution

Securityprompt, exec, net, exfil, eval

35%

100

35.0 pts

Supply chainhash, typosquat, maintainer, lockfile

20%

100

20.0 pts

Maintenancestaleness, pinning, CI

15%

100

15.0 pts

TransparencySKILL.md, perms, README

15%

100

15.0 pts

Communityinstalls, verify, response

15%

100

15.0 pts

Findings & checks · 0 flagged

Securityscore 100 · 0 findings

✓—All security checks passedNo findings in this category for the latest scan.pass

Supply chainscore 100 · 0 findings

✓—All supply chain checks passedNo findings in this category for the latest scan.pass

Maintenancescore 100 · 0 findings

✓—All maintenance checks passedNo findings in this category for the latest scan.pass

Transparencyscore 100 · 0 findings

✓—All transparency checks passedNo findings in this category for the latest scan.pass

Communityscore 100 · 0 findings

✓—All community checks passedNo findings in this category for the latest scan.pass

The primary manifest — the file an agent reads to learn what this artifact does.

.agents/skills/astro/SKILL.md · 1 file

.agents/skills/astro/SKILL.md4.2 KB · Markdown

description: Skill for building with the Astro web framework. Helps create Astro components and pages, configure SSR adapters, set up content collections, deploy static sites, and manage project structure and CLI commands. Use when the user needs to work with Astro, mentions .astro files, asks about static site generation (SSG), islands architecture, content collections, or deploying an Astro project.

license: MIT

metadata:

authors: Astro Team

github-path: skills/astro

github-ref: refs/heads/main

github-repo: https://github.com/astrolicious/agent-skills

github-tree-sha: 81d96cec5008970ed8fbecb23f7fb48536102b84

version: 0.0.1

name: astro

Astro Usage Guide

Always consult [docs.astro.build](https://docs.astro.build) for code examples and latest API.

Astro is the web framework for content-driven websites.

Quick Reference

File Location

CLI looks for astro.config.js, astro.config.mjs, astro.config.cjs, and astro.config.ts in: ./. Use --config for custom path.

CLI Commands

npx astro dev - Start the development server.
npx astro build - Build your project and write it to disk.
npx astro check - Check your project for errors.
npx astro add - Add an integration.
npx astro sync - Generate TypeScript types for all Astro modules.

Re-run after adding/changing plugins.

Project Structure

Reference project structure docs.

src/* - Project source code (components, pages, styles, images, etc.)
src/pages - Required. Defines all pages and routes.
src/components - Components (convention, not required).
src/layouts - Layout components (convention, not required).
src/styles - CSS/Sass files (convention, not required).
public/* - Non-code, unprocessed assets (fonts, icons, etc.); copied as-is to build output.
package.json - Project manifest.
astro.config.{js,mjs,cjs,ts} - Astro configuration file. (recommended)
tsconfig.json - TypeScript configuration file. (recommended)

Core Config Options

Option	Notes
`site`	Your final, deployed URL. Used to generate sitemaps and canonical URLs.

Example `astro.config.ts`

import { defineConfig } from 'astro/config';

export default defineConfig({
  site: 'https://example.com',
});

Common Workflows

Creating a Basic Page

Add a file to src/pages/ — the filename becomes the route:

---
// src/pages/index.astro
const title = 'Hello, Astro!';
---
<html>
  <head><title>{title}</title></head>
  <body>
    <h1>{title}</h1>
  </body>
</html>

Creating a Component

---
// src/components/Card.astro
const { title, body } = Astro.props;
---
<div class="card">
  <h2>{title}</h2>
  <p>{body}</p>
</div>

Deploying with an Adapter

Add the adapter: npx astro add vercel --yes (or node, cloudflare, netlify)
Run npx astro check to catch type and configuration errors before building.
Run npx astro build to produce the deployment artifact.
Verify the build output directory (e.g. dist/) exists and is non-empty before proceeding.
Deploy the output per the adapter's documentation.

Adapters

Deploy to your favorite server, serverless, or edge host with build adapters. Use an adapter to enable on-demand rendering in your Astro project.

Add [Node.js](https://docs.astro.build/en/guides/integrations-guide/node) adapter using astro add:

npx astro add node --yes

Add [Cloudflare](https://docs.astro.build/en/guides/integrations-guide/cloudflare) adapter using astro add:

npx astro add cloudflare --yes

Add [Netlify](https://docs.astro.build/en/guides/integrations-guide/netlify) adapter using astro add:

npx astro add netlify --yes

Add [Vercel](https://docs.astro.build/en/guides/integrations-guide/vercel) adapter using astro add:

npx astro add vercel --yes

Other Community adapters

astro— agent skill

Is astro safe to install?

Astro Usage Guide

Quick Reference

File Location

CLI Commands

Project Structure

Core Config Options

Example `astro.config.ts`

Common Workflows

Creating a Basic Page

Creating a Component

Deploying with an Adapter

Adapters

Resources

Audit the pieces. Scan the whole. Decide.

Is astro safe to install?

Astro Usage Guide

Quick Reference

File Location

CLI Commands

Project Structure

Core Config Options

Example astro.config.ts

Common Workflows

Creating a Basic Page

Creating a Component

Deploying with an Adapter

Adapters

Resources

Audit the pieces. Scan the whole. Decide.

Example `astro.config.ts`