tailwindcss-v4

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • [DATA_EXPOSURE] (LOW): The file src/validate.ts contains a hardcoded local file path (/Users/greenapple/Code/OpenSources/tailwindcss) likely belonging to the original author's environment. While this leaks a local username, it poses no security risk to users of the skill.
  • [COMMAND_EXECUTION] (LOW): The developer scripts src/build.ts and src/validate.ts use Bun's shell execution ($) to run build commands and the Tailwind CLI. These are standard developer tools used for compilation and automated validation and are not part of the AI agent's runtime interaction logic.
  • [EXTERNAL_DOWNLOADS] (SAFE): The validation script performs an npm install for the tailwindcss package from the official NPM registry to verify the CSS output. This is a trusted source and a standard practice for library validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:25 PM