tailwindcss-v4
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE] (LOW): The file
src/validate.tscontains a hardcoded local file path (/Users/greenapple/Code/OpenSources/tailwindcss) likely belonging to the original author's environment. While this leaks a local username, it poses no security risk to users of the skill. - [COMMAND_EXECUTION] (LOW): The developer scripts
src/build.tsandsrc/validate.tsuse Bun's shell execution ($) to run build commands and the Tailwind CLI. These are standard developer tools used for compilation and automated validation and are not part of the AI agent's runtime interaction logic. - [EXTERNAL_DOWNLOADS] (SAFE): The validation script performs an
npm installfor thetailwindcsspackage from the official NPM registry to verify the CSS output. This is a trusted source and a standard practice for library validation.
Audit Metadata