shadcn-tailwind-ui
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a configuration generator script,
scripts/generate_tailwind_config.py, which is intended to be executed by the agent to manage Tailwind CSS settings. The script incorporates input validation using regular expressions and requires explicit user-provided flags (--writeor--force) to perform file system modifications, minimizing the risk of unauthorized writes. - [DYNAMIC_EXECUTION]: The
tests/test_generate_tailwind_config.pyfile uses thesubprocessmodule to run the configuration script during unit tests. This is a standard and safe implementation for verifying CLI tool functionality within a controlled test environment using temporary directories. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process existing project metadata (such as
package.jsonandcomponents.json) to align with project-specific styling conventions. While this involves reading external data, the skill mitigates risk through structured implementation workflows and the use of a guarded configuration script for outputs.
Audit Metadata