worldclass-tailwind-v4-visual-design
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or security vulnerabilities detected. The skill is purely instructional and aimed at UI/UX design tasks.
- [PROMPT_INJECTION]: The instructions do not contain attempts to override safety filters, bypass platform constraints, or disregard previous system instructions. The language is professional and task-oriented.
- [DATA_EXFILTRATION]: No sensitive file paths (e.g., credentials, SSH keys, environment variables) are accessed. The only network references are to the host platform (tasking.tech) and the author's GitHub repository, which are legitimate context for a skill.
- [REMOTE_CODE_EXECUTION]: There are no commands that download and execute scripts (e.g., curl|bash), no package installations, and no use of dynamic execution functions like eval or exec.
- [OBFUSCATION]: The file contains clear, human-readable markdown and YAML. There is no evidence of Base64 encoding, zero-width characters, homoglyphs, or hidden text patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of user-provided brand traits and existing website code. However, its capabilities are limited to generating static design code (Tailwind CSS/JSX) and image prompts, which does not present a path for privilege escalation or sensitive data access.
- [PRIVILEGE_ESCALATION]: No administrative commands, privilege-altering operations (sudo/chmod), or persistence mechanisms (cron/registry) were found.
Audit Metadata