dart-sass
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download official standalone binaries from the sass organization's GitHub repository.
- [COMMAND_EXECUTION]: Includes standard shell commands for managing packages via npm, Homebrew, and other managers, as well as commands for the Sass command-line interface.
- [INDIRECT_PROMPT_INJECTION]: The skill documents how to compile user-supplied styles, which constitutes a surface for indirect prompt injection if the source files are untrusted.
- Ingestion points: User-provided style files and project directories.
- Boundary markers: None; the templates do not define explicit delimiters for separating instructions from code.
- Capability inventory: Execution of CLI tools and file system modifications for compilation output.
- Sanitization: Not addressed; the skill relies on the user to provide valid and safe source files.
Audit Metadata