shadcn-ui
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches component source code and configuration from remote registries using the shadcn CLI.
- The skill includes explicit security warnings in
SKILL.mdandofficial-ui-reference.mdadvising users to verify registry sources and review component code after installation. - It documents the use of official registries (e.g.,
ui.shadcn.com) and placeholders for private registries. - [COMMAND_EXECUTION]: Provides numerous bash commands for project initialization, component installation, and dependency management.
- Examples include
npx shadcn@latest init,npm install, andnpx create-next-appfound throughoutSKILL.md,official-ui-reference.md, andui-reference.md. - These commands are standard for the described React/Next.js development workflow.
Audit Metadata