tailwind-errors-build-failures

Pass

Audited by Gen Agent Trust Hub on Aug 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides several commands for clearing build caches, such as rm -rf node_modules/.vite, rm -rf .next, and rm -rf .astro. While these are standard recovery procedures for frontend developers, they are destructive operations.
  • [SAFE]: All external links point to official Tailwind CSS documentation or legitimate GitHub issue trackers (e.g., tailwindlabs/tailwindcss).
  • [SAFE]: The recommended Node.js packages (tailwindcss, @tailwindcss/vite, etc.) are official components of the Tailwind ecosystem.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes examples of scripts that read and process the dist/output.css file to verify build results. This represents a potential data ingestion surface, although the logic is limited to simple string matching in a local environment.
  • Ingestion points: The dist/output.css file is read by verification scripts in references/examples.md and references/methods.md.
  • Boundary markers: None; the scripts use simple inclusion checks.
  • Capability inventory: The suggested scripts use the Node.js fs module to read local files.
  • Sanitization: Absent; the scripts perform direct string matching using .includes().
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 23, 2026, 10:57 AM
Security Audit — agent-trust-hub — tailwind-errors-build-failures