tailwindcss-v4
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references official Tailwind CSS packages from the
@tailwindcssNPM scope for installation and migration purposes. - [COMMAND_EXECUTION]: Documents the use of the official
@tailwindcss/upgradetool vianpxto facilitate project migration from v3 to v4. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for processing and migrating user-controlled CSS and HTML source code, which serves as a potential surface for indirect prompt injection.
- Ingestion points: Project source code files (CSS, HTML) processed during migration tasks (documented in SKILL.md).
- Boundary markers: None identified within the provided documentation.
- Capability inventory: The skill itself is documentation-only and does not define active tools or shell execution capabilities beyond the documented migration command.
- Sanitization: No specific sanitization or validation instructions are provided for the code being migrated.
Audit Metadata