hyva-compile-tailwind-css

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses standard shell commands to manage theme assets, specifically npm ci for dependency installation and npm run build or npm run watch for CSS compilation. These operations are scoped to the theme's directory and are expected for the stated purpose of building styles.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests theme paths as data from external inputs (via user request or discovery tools). This ingestion surface is used to target the correct directory for compilation and includes logical filtering to target standard Magento theme paths in app/design/frontend/.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 06:41 AM