shadcn-ui

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches component source code and configuration from remote registries using the shadcn CLI.
  • The skill includes explicit security warnings in SKILL.md and official-ui-reference.md advising users to verify registry sources and review component code after installation.
  • It documents the use of official registries (e.g., ui.shadcn.com) and placeholders for private registries.
  • [COMMAND_EXECUTION]: Provides numerous bash commands for project initialization, component installation, and dependency management.
  • Examples include npx shadcn@latest init, npm install, and npx create-next-app found throughout SKILL.md, official-ui-reference.md, and ui-reference.md.
  • These commands are standard for the described React/Next.js development workflow.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 03:41 PM