tailwind-coder
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell commands (
cat) to verify the existence and contents of standard configuration files (tailwind.config.js). These are routine setup checks and present no security risk. - [INDIRECT_PROMPT_INJECTION]: The skill processes Rails view files, creating a surface for potential indirect prompt injection if those files contain untrusted content.
- Ingestion points: Rails view templates (
.html.erb). - Boundary markers: None present in the instructions.
- Capability inventory: Tools for reading, writing, and editing files, as well as searching within the project.
- Sanitization: The skill utilizes standard Rails view helpers (
link_to,form_with) which perform default HTML escaping of dynamic content. - [SAFE]: All styling patterns, layout grids, and component examples follow industry standard practices for Tailwind CSS and Ruby on Rails development.
Audit Metadata