tailwind-to-stylex

Pass

Audited by Gen Agent Trust Hub on Jul 11, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill's primary function is static code analysis and transformation. No high-risk operations such as network requests to unknown domains, credential harvesting, or unauthorized file system modifications were identified.\n- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests and processes untrusted user source code containing Tailwind class strings. However, the risk is minimal as the skill performs pure text-to-text transformation without executing the code or utilizing high-privilege tools.\n
  • Ingestion points: Source code files (.tsx, .jsx, .vue, .svelte, .ts, .js) processed during the migration workflow described in SKILL.md.\n
  • Boundary markers: No explicit delimiters are suggested in the instructions to isolate user-provided code from the agent's internal logic.\n
  • Capability inventory: The skill is restricted to generating code output and does not invoke network tools or subprocesses.\n
  • Sanitization: The skill does not define specific sanitization or validation logic for the input strings before they are processed by the LLM.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 11, 2026, 07:46 PM
Security Audit — agent-trust-hub — tailwind-to-stylex