weapp-tailwindcss-custom-build
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate technical documentation for integrating weapp-tailwindcss into custom build pipelines. The logic is focused on CSS and JavaScript transformation during build time.
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly defines security boundaries for the class scanning process. It provides instructions to ensure that sensitive data such as API endpoints, internal routes, and logs are not treated as Tailwind CSS classes, which serves as a mitigation against data leakage in generated assets.
- [COMMAND_EXECUTION]: The code patterns use standard Node.js modules for local file resolution within a project's build context. It correctly advises using bundler-specific APIs for asset management rather than arbitrary file system writes.
Audit Metadata