unused-css

Pass

Audited by Gen Agent Trust Hub on Aug 11, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references standard Node.js development packages such as purgecss, uncss, puppeteer, and postcss. These are widely used tools in the frontend ecosystem for performance optimization.
  • [EXTERNAL_DOWNLOADS]: The provided GitHub Actions template uses official actions (actions/checkout and actions/setup-node) to automate build processes.
  • [COMMAND_EXECUTION]: Examples include CLI commands for package installation and running build-time tools like npx purgecss. These are typical for project build pipelines.
  • [INDIRECT_PROMPT_INJECTION]: The skill includes browser automation snippets using Puppeteer to navigate pages for CSS coverage analysis. While this processes external web content, the logic is limited to extracting style usage and does not interpolate untrusted data into instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 11, 2026, 12:30 AM
Security Audit — agent-trust-hub — unused-css