tailwind
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [Prompt Injection] (LOW): The skill is susceptible to Indirect Prompt Injection (Category 8) as it processes untrusted data from the repository.
- Ingestion points: The skill uses
grepand theReadtool to ingest content from.tsx,.jsx, and.htmlfiles in the local codebase. - Boundary markers: Absent. The instructions do not include delimiters or specific guidance for the agent to ignore instructions that might be embedded within the source code being audited.
- Capability inventory: The skill utilizes
BashandEdittools, granting it the ability to execute searches and modify the filesystem based on interpreted content. - Sanitization: Absent. The skill performs direct regex-based searches on raw file content without sanitization or escaping of the ingested data.
Audit Metadata