astro
github.com/astrolicious/agent-skills
Scanned Thu, 28 May 2026 16:58:00 GMT
Scan ID crawl-t2m58ve6bwkj7s6ov72uiyox · 2ms
B
SCORE 75 / 100
Verdict: Safe to install
3 medium findings.
This skill ships without a capability manifest plus 2 other issues listed below.
0 critical0 high3 medium9 rules passed
Why grade B?
score · 75 / 100The current grade reflects 3 medium findings (3+ MEDs → B).
0 CRIT0 HIGH3 MED0 LOW
To reach a higher grade
- AReach Atarget score 95
Resolve 1 of 3 MED (cap is 2).
Thresholds are documented at /docs/grading. Source-of-truth is the grade() function in @skillox/scanner.
Findings · ordered by severity
medNo capability manifest declaredThe skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.rule: no-manifest▾
No capability manifest declared
The skill ships without a `manifest.yaml` or `capabilities` block in its frontmatter. Without a manifest, the runtime cannot enforce what this skill is permitted to do.
rule:
no-manifestmedLink text shows "node.js" but points at docs.astro.buildThe visible link text contains the domain `node.js`, but the URL actually targets `docs.astro.build`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "node.js" but points at docs.astro.build
The visible link text contains the domain `node.js`, but the URL actually targets `docs.astro.build`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
111Deploy to your favorite server, serverless, or edge host with build adapters. Use an adapter to enable on-demand rendering in your Astro project.
112
113**Add [Node.js](https://docs.astro.build/en/guides/integrations-guide/node) adapter using astro add:**← text→node.js · href→docs.astro.build
114```
115npx astro add node --yes
medLink text shows "llms.txt" but points at docs.astro.buildThe visible link text contains the domain `llms.txt`, but the URL actually targets `docs.astro.build`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.▾
Link text shows "llms.txt" but points at docs.astro.build
The visible link text contains the domain `llms.txt`, but the URL actually targets `docs.astro.build`. This is a phishing/smuggling pattern — the reader sees one host, the agent fetches another. Either update the text or the URL so they match.
137- [Docs](https://docs.astro.build)
138- [Config Reference](https://docs.astro.build/en/reference/configuration-reference/)
139- [llms.txt](https://docs.astro.build/llms.txt)← text→llms.txt · href→docs.astro.build
140- [GitHub](https://github.com/withastro/astro)
141
skillox.io/r/crawl-t2m58ve6bwkj7s6ov72uiyox