tailwind-brand
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides an example command
npx brandmd https://tailwindcss.com -o references/DESIGN.mdfor manually updating design tokens using the author's utility. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon data from
references/DESIGN.mdto guide UI generation. - Ingestion points: The file
references/DESIGN.mdis loaded by the agent as a primary requirement inSKILL.md. - Boundary markers: Absent; there are no explicit delimiters or instructions to ignore potential non-design directives within the reference file.
- Capability inventory: The skill is scoped to generating visual components, style blocks, and page layouts based on the ingested tokens.
- Sanitization: Absent; the design tokens are used as-is for styling generation.
Audit Metadata