css-styling-expert
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard shell utilities like
grep,cat, andlsto analyze project structure, detect CSS methodologies (e.g., BEM, CSS-in-JS), and verify configuration files like.browserslistrc. It also invokesnpm run buildto check for bundling errors. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto execute well-known development and auditing tools, includingstylelint,lighthouse,webpack-bundle-analyzer, andaxe-core. These tools are fetched from the official npm registry, which is a well-known and trusted service for development dependencies. - [REMOTE_CODE_EXECUTION]: Runtime execution is performed through standard package scripts (
npm run build) and utility runners (npx). These are standard practices for frontend development and are used here for validation and diagnostics. - [PROMPT_INJECTION]: The skill interacts with project source code and configuration files. While reading external data creates a theoretical surface for indirect prompt injection, the skill's logic is restricted to diagnostic analysis of CSS patterns and does not involve executing instructions embedded within the CSS data.
Audit Metadata