Security audit
Security checks for vulnerabilities and agentic risk
This skill is a straightforward Tailwind design-system guidance package with no executable code, persistence, credential handling, or hidden behavior.
Install only if you want Tailwind design-system guidance to activate for token, theme, variant, dark-mode, responsive, or class-governance work. Expect broad Tailwind-related activation, but the package does not include code execution or sensitive access.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
- ID: `fec-tailwind-design-system`
- Category: `design-ui`
- Version: `2.9.0`
- Source: `skills/fec-tailwind-design-system/SKILL.md`
## Description
The description says to use the skill when 'designing, implementing, or reviewing' a wide range of Tailwind topics and lists loosely defined 'Chinese triggers' such as 'Tailwind' and 'dark mode'. These terms are broad and common in frontend discussions, and the file does not provide exclusion conditions or negative examples to clarify when the skill should not activate.
The invocation description says to use the skill when "designing, implementing, or reviewing" Tailwind CSS design systems and related topics, which is a very broad condition rather than a narrowly bounded trigger. It does not provide explicit exclusion conditions or negative examples, increasing the chance the skill could be invoked for routine front-end work whenever Tailwind-related terms appear.
The package description states that 'Chinese triggers include Tailwind, design Token, component variants, dark mode, class management,' which introduces a language-specific activation policy in natural language. Because this manifest does not indicate user choice or a documented locale-specific scope, it may violate the requirement to avoid forcing a specific language or locale without opt-in.
No suspicious patterns detected.