tailwind-agent
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: Analysis of the skill body and referenced patterns reveals only legitimate development guidelines and Rails-specific styling templates.
- [COMMAND_EXECUTION]: The skill includes standard Rails development commands (bin/dev, bin/rails console, rubocop, rspec). While these involve code execution and file modification, they are typical for the described development persona.
- [PROMPT_INJECTION]: An indirect prompt injection surface exists due to the skill reading project source files.
- Ingestion points: Files in app/views/, app/components/, app/assets/tailwind/, app/javascript/controllers/, and app/helpers/.
- Boundary markers: None identified.
- Capability inventory: Execution of shell commands like rubocop and rspec.
- Sanitization: No content sanitization is implemented.
Audit Metadata