converting-css-modules-to-tailwind
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data in the form of component source code and CSS module files during the migration process.
- Ingestion points: The agent is instructed to read
.module.css,.module.scss, and component files (e.g.,.tsx) to perform mapping and conversion (Steps 1 and 2 in SKILL.md). - Boundary markers: There are no instructions defining delimiters or warning the agent to ignore instructions that might be embedded within comments or strings in the code being refactored.
- Capability inventory: The skill provides instructions for the agent to read file contents, modify source code, and delete files (Step 4 in SKILL.md).
- Sanitization: The skill lacks explicit sanitization or validation steps for the content found within the external files before they are processed by the agent.
Audit Metadata