21st-registry
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
npxto run vendor-owned CLI tools such as@21st-dev/registryand@21st-sdk/clifor component management and user authentication. - [CREDENTIALS_UNSAFE]: The agent is instructed to verify authentication by checking the
~/.an/credentialsfile or theAPI_KEY_21STenvironment variable, which are required for interaction with the 21st.dev service. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions for manual installation and CLI acquisition via
curlfrom the vendor's domain and the official NPM registry. - [DATA_EXFILTRATION]: The skill's primary function involves uploading local React component code to the 21st.dev registry. Security instructions are included to prevent the agent from including secrets or environment variables in these uploads.
Audit Metadata