tailwind-v4-configuration
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to perform package management and execution tasks using npm, npx, and the @tailwindcss/cli. These are standard procedures for project setup and migration.
- [EXTERNAL_DOWNLOADS]: The skill references official Tailwind CSS repositories and packages, including tailwindcss, @tailwindcss/postcss, @tailwindcss/vite, and the @tailwindcss/upgrade tool. These are well-known resources from a reputable vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface as it is designed to ingest and process existing project configuration files and source code to generate updated configurations.
- Ingestion points: Project configuration files (e.g., tailwind.config.js, postcss.config.js) and CSS entry points as described in SKILL.md and context/migration-guide.md.
- Capability inventory: File writing (CSS and configuration updates) and command execution (npm install, npx @tailwindcss/upgrade).
- Sanitization: No explicit sanitization of ingested content is defined in the instructions.
- Boundary markers: No specific boundary markers or warnings are implemented to separate user data from agent instructions during processing.
Audit Metadata