modern-css
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides code examples that reference external assets from well-known services and CDNs, including Open Props CSS from unpkg.com, script polyfills from github.com (via jsDelivr), and media assets from assets.codepen.io. These are intended for implementation in generated web projects and represent standard development practices.
- [COMMAND_EXECUTION]: The instructions in SKILL.md direct the agent to utilize standard CLI tools, specifically
npx browserslist, to identify supported browser targets within the project environment. This ensures the generated CSS is compatible with the project's requirements. - [INDIRECT_PROMPT_INJECTION]: The skill includes instructions to ingest supplementary data from external sources.
- Ingestion points: The skill instructs the agent in SKILL.md to read named files from linked GitHub sources (e.g., github.com/Quegenx/agent-skills) if they are not available locally.
- Boundary markers: Absent.
- Capability inventory: The skill is restricted to file reading and standard development commands like
npxorgitfor environment detection. - Sanitization: None described.
- Context: The referenced repositories belong to the skill author and provide legitimate supplementary documentation.
Audit Metadata