sveltekit-svelte5-tailwind-skill
Warn
Audited by Gen Agent Trust Hub on Feb 14, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- COMMAND_EXECUTION (LOW): The file
references/getting-started.mdcontains instructions for the user or agent to execute local shell commands, including environment checks (node --version), project initialization (npm create svelte@latest), and dependency installation (npm install). While standard for a setup guide, these involve interaction with the local system. - EXTERNAL_DOWNLOADS (MEDIUM): The guide facilitates the download and execution of multiple Node.js packages (e.g.,
tailwindcss@next,@tailwindcss/vite@next,svelte@^5.0.0). Because thetailwindcssandsveltejsorganizations are not explicitly listed in the Trusted Organizations list, these dependencies are classified as unverifiable. The recommendation to use the@nextand@latesttags introduces further risk as it installs unpinned versions that could change without notice.
Audit Metadata