setup-tailwindcss
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs official Tailwind CSS packages (
tailwindcss,@tailwindcss/vite,@tailwindcss/postcss) from the public npm registry. These are standard dependencies for the requested functionality and are recognized as well-known service components. - [COMMAND_EXECUTION]: Executes
npm installandnpm run devto set up and verify the environment. These commands are restricted to the local project context and use hardcoded package names, which prevents potential command injection vulnerabilities. - [SAFE]: File modifications to
vite.config.ts,postcss.config.mjs, and CSS files follow official Tailwind CSS v4 installation guidelines. The skill uses static templates for configuration and does not involve interpolation of untrusted external data into executable contexts.
Audit Metadata