weapp-tailwindcss-lynx
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing standard developer tools and libraries including
@weapp-tailwindcss/lynxandtailwindcssvia pnpm. These are well-known packages or official vendor resources from the skill author. - [COMMAND_EXECUTION]: The documentation includes standard development commands for building, testing, and end-to-end verification (e.g.,
pnpm build,pnpm test). These are expected behaviors for a development-focused skill and do not involve unauthorized privilege escalation or persistence mechanisms. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to process project source files (TSX, CSS) via Tailwind's
@sourcedirective to extract style tokens. While this represents a data ingestion surface, it is constrained to CSS utility extraction and does not include risky interpolation or execution of untrusted code from those files.
Audit Metadata