hyva-compile-tailwind-css
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard shell commands to manage theme assets, specifically
npm cifor dependency installation andnpm run buildornpm run watchfor CSS compilation. These operations are scoped to the theme's directory and are expected for the stated purpose of building styles. - [INDIRECT_PROMPT_INJECTION]: The skill ingests theme paths as data from external inputs (via user request or discovery tools). This ingestion surface is used to target the correct directory for compilation and includes logical filtering to target standard Magento theme paths in
app/design/frontend/.
Audit Metadata