weapp-tailwindcss-react-native
Pass
Audited by Gen Agent Trust Hub on Aug 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for installing dependencies using
pnpm add @weapp-tailwindcss/react-nativeandpnpm add -D tailwindcssinreferences/expo-integration.md. These are standard package management operations for the library's intended use. - [DYNAMIC_EXECUTION]: The
references/expo-integration.mdfile contains a validation script (check-native-manifest.mjs) that dynamically executes thegenerateNativeStylesheetfunction from the@weapp-tailwindcss/react-nativelibrary. This is used for build-time verification of the native stylesheet manifest. - [INDIRECT_PROMPT_INJECTION]: The skill configures a workflow that ingests untrusted data by scanning project source files for CSS classes.
- Ingestion points: Project source files defined by glob patterns such as
./app/**/*.{js,jsx,ts,tsx}and./src/**/*.{js,jsx,ts,tsx}(defined inSKILL.mdandreferences/expo-integration.md). - Boundary markers: None explicitly defined to prevent the agent from processing malicious instructions embedded in source code comments or strings within the scanned files.
- Capability inventory: The skill interacts with the Metro transformer and Babel JSX transform to generate styles.
- Sanitization: The skill relies on the internal logic of the
@weapp-tailwindcss/react-nativecompiler to handle CSS class extraction.
Audit Metadata