tailwind-coder

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell commands (cat) to verify the existence and contents of standard configuration files (tailwind.config.js). These are routine setup checks and present no security risk.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes Rails view files, creating a surface for potential indirect prompt injection if those files contain untrusted content.
  • Ingestion points: Rails view templates (.html.erb).
  • Boundary markers: None present in the instructions.
  • Capability inventory: Tools for reading, writing, and editing files, as well as searching within the project.
  • Sanitization: The skill utilizes standard Rails view helpers (link_to, form_with) which perform default HTML escaping of dynamic content.
  • [SAFE]: All styling patterns, layout grids, and component examples follow industry standard practices for Tailwind CSS and Ruby on Rails development.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 12:28 AM