css-styling-expert

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard shell utilities like grep, cat, and ls to analyze project structure, detect CSS methodologies (e.g., BEM, CSS-in-JS), and verify configuration files like .browserslistrc. It also invokes npm run build to check for bundling errors.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to execute well-known development and auditing tools, including stylelint, lighthouse, webpack-bundle-analyzer, and axe-core. These tools are fetched from the official npm registry, which is a well-known and trusted service for development dependencies.
  • [REMOTE_CODE_EXECUTION]: Runtime execution is performed through standard package scripts (npm run build) and utility runners (npx). These are standard practices for frontend development and are used here for validation and diagnostics.
  • [PROMPT_INJECTION]: The skill interacts with project source code and configuration files. While reading external data creates a theoretical surface for indirect prompt injection, the skill's logic is restricted to diagnostic analysis of CSS patterns and does not involve executing instructions embedded within the CSS data.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 02:08 AM
Security Audit — agent-trust-hub — css-styling-expert