skills/impertio-studio/tailwindcss-claude-skill-package/tailwind-errors-build-failures/Gen Agent Trust Hub
tailwind-errors-build-failures
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides several commands for clearing build caches, such as
rm -rf node_modules/.vite,rm -rf .next, andrm -rf .astro. While these are standard recovery procedures for frontend developers, they are destructive operations. - [SAFE]: All external links point to official Tailwind CSS documentation or legitimate GitHub issue trackers (e.g., tailwindlabs/tailwindcss).
- [SAFE]: The recommended Node.js packages (tailwindcss, @tailwindcss/vite, etc.) are official components of the Tailwind ecosystem.
- [INDIRECT_PROMPT_INJECTION]: The skill includes examples of scripts that read and process the
dist/output.cssfile to verify build results. This represents a potential data ingestion surface, although the logic is limited to simple string matching in a local environment. - Ingestion points: The
dist/output.cssfile is read by verification scripts inreferences/examples.mdandreferences/methods.md. - Boundary markers: None; the scripts use simple inclusion checks.
- Capability inventory: The suggested scripts use the Node.js
fsmodule to read local files. - Sanitization: Absent; the scripts perform direct string matching using
.includes().
Audit Metadata