angular-tailwind
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates Angular components and Tailwind configuration based on user input, creating a potential surface for indirect prompt injection if untrusted data is interpolated without sanitization.
- Ingestion points: User-provided content for Angular templates and component properties in
SKILL.md. - Boundary markers: None present in the provided templates.
- Capability inventory: Shell command execution (
npm,npx) and file writing capabilities across the skill usage. - Sanitization: Not explicitly implemented in the provided code snippets.
- [EXTERNAL_DOWNLOADS]: The skill fetches standard CSS processing packages and tools from the official npm registry.
- Evidence:
npm install -D tailwindcss postcss autoprefixerandnpm install tailwindcss @tailwindcss/viteinSKILL.md. - [COMMAND_EXECUTION]: Provides standard commands for initializing the Tailwind environment and managing dependencies.
- Evidence:
npx tailwindcss initand variousnpm installinstructions inSKILL.md.
Audit Metadata