dart-sass
Warn
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONPERSISTENCEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The file
examples/getting-started/installation.mdcontains instructions for global installation of the Sass package usingsudo npm install -g sass. Although the documentation notes that this is not recommended, it explicitly provides a command for execution with elevated root privileges. - [PERSISTENCE]: In
examples/getting-started/installation.md, the skill instructs users to modify shell profile files (~/.bashrcor~/.zshrc) to add the Sass binary to the systemPATH. This ensures the tool remains available across different terminal sessions. - [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Sass compiler binary directly from its official GitHub repository releases (
github.com/sass/dart-sass). This is documented as a standard installation method from the tool's primary source. - [COMMAND_EXECUTION]: Multiple documentation files (e.g.,
api/cli-api.md,examples/getting-started/basic-usage.md) provide extensive examples of command-line usage for thesasscompiler, including watching directories and batch compilation.
Audit Metadata