tailwind-4-docs
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires an initialization step where it fetches documentation content from the tailwindlabs/tailwindcss.com repository to populate its local reference directory. This download is from a well-known organization and is documented neutrally.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves reading and interpreting MDX documentation files from an external source, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: MDX files located in the references/docs/ directory after initialization.
- Boundary markers: There are no specific delimiters or boundary instructions to mitigate the risk of the agent following instructions embedded within the documentation files.
- Capability inventory: The skill allows the agent to read and process documentation content to assist with development, configuration, and migration tasks.
- Sanitization: No sanitization or validation of the external documentation content is performed before processing.
Audit Metadata