sveltekit-svelte5-tailwind-skill

Warn

Audited by Gen Agent Trust Hub on Feb 14, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • COMMAND_EXECUTION (LOW): The file references/getting-started.md contains instructions for the user or agent to execute local shell commands, including environment checks (node --version), project initialization (npm create svelte@latest), and dependency installation (npm install). While standard for a setup guide, these involve interaction with the local system.
  • EXTERNAL_DOWNLOADS (MEDIUM): The guide facilitates the download and execution of multiple Node.js packages (e.g., tailwindcss@next, @tailwindcss/vite@next, svelte@^5.0.0). Because the tailwindcss and sveltejs organizations are not explicitly listed in the Trusted Organizations list, these dependencies are classified as unverifiable. The recommendation to use the @next and @latest tags introduces further risk as it installs unpinned versions that could change without notice.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 14, 2026, 04:49 PM