tailwind-responsive-ui
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- Prompt Injection (SAFE): No instructions were found that attempt to override the AI agent's system prompt or bypass safety guardrails.
- Data Exposure & Exfiltration (SAFE): No hardcoded API keys, tokens, or sensitive file paths (e.g., .env, .ssh) were detected. No unauthorized network calls or exfiltration patterns exist.
- Obfuscation (SAFE): All content is in plain text. No Base64, zero-width characters, or homoglyph attacks were identified.
- Unverifiable Dependencies & RCE (SAFE): The skill does not include any scripts that install external packages or execute remote code via curl or wget.
- Privilege Escalation & Persistence (SAFE): No commands related to sudo, chmod, or system persistence (e.g., cron, bashrc) were found.
- Indirect Prompt Injection (SAFE): The skill does not ingest untrusted external data or have capabilities that could be exploited via third-party content.
- Dynamic Execution (SAFE): The only script found is a benign JavaScript example in nav-sticky-header-compact.md for DOM manipulation (scrolling effects), which is part of the documentation and not executed on the host system.
Audit Metadata