web-styling-theming

Pass

Audited by Gen Agent Trust Hub on Oct 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides JavaScript code examples for managing theme state. These examples involve standard browser operations such as modifying DOM attributes (e.g., document.documentElement.setAttribute) and reading computed styles to manage UI transitions.
  • [EXTERNAL_DOWNLOADS]: The documentation references the next-themes library. This is a well-known, established open-source utility for React applications and its use is consistent with the primary purpose of the skill.
  • [DYNAMIC_EXECUTION]: The skill demonstrates how to inject a small, synchronous inline script and dynamic CSS into the document's head to prevent layout shifts and theme flashing. These are standard architectural patterns in web development for the stated use case.
  • [INDIRECT_PROMPT_INJECTION]: While the skill describes patterns for ingesting data from external sources like localStorage and browser cookies, it explicitly includes code examples that validate these inputs against a fixed whitelist of values (e.g., 'light' and 'dark'). This prevents the injection of arbitrary or malicious strings into the application's DOM structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 17, 2026, 02:57 AM