angular-tailwind

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill generates Angular components and Tailwind configuration based on user input, creating a potential surface for indirect prompt injection if untrusted data is interpolated without sanitization.
  • Ingestion points: User-provided content for Angular templates and component properties in SKILL.md.
  • Boundary markers: None present in the provided templates.
  • Capability inventory: Shell command execution (npm, npx) and file writing capabilities across the skill usage.
  • Sanitization: Not explicitly implemented in the provided code snippets.
  • [EXTERNAL_DOWNLOADS]: The skill fetches standard CSS processing packages and tools from the official npm registry.
  • Evidence: npm install -D tailwindcss postcss autoprefixer and npm install tailwindcss @tailwindcss/vite in SKILL.md.
  • [COMMAND_EXECUTION]: Provides standard commands for initializing the Tailwind environment and managing dependencies.
  • Evidence: npx tailwindcss init and various npm install instructions in SKILL.md.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 04:56 PM