tailwind-brand

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation provides an example command npx brandmd https://tailwindcss.com -o references/DESIGN.md for manually updating design tokens using the author's utility.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from references/DESIGN.md to guide UI generation.
  • Ingestion points: The file references/DESIGN.md is loaded by the agent as a primary requirement in SKILL.md.
  • Boundary markers: Absent; there are no explicit delimiters or instructions to ignore potential non-design directives within the reference file.
  • Capability inventory: The skill is scoped to generating visual components, style blocks, and page layouts based on the ingested tokens.
  • Sanitization: Absent; the design tokens are used as-is for styling generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 10:34 PM