ui-styling
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The skill contains a Python script
scripts/shadcn_add.pythat wraps theshadcnCLI. It usessubprocess.runwith argument lists, which is a secure way to execute external commands without risking shell injection. - [EXTERNAL_DOWNLOADS] (SAFE): The documentation and scripts rely on standard package managers (npm/npx) to fetch components from trusted official registries.
- [DATA_EXPOSURE] (SAFE): No evidence of sensitive data access or exfiltration was found. The skill does not interact with sensitive file paths or network endpoints other than standard package management.
- [PROMPT_INJECTION] (SAFE): All markdown and code content follow the intended purpose of the skill without attempting to override agent instructions or safety protocols.
Audit Metadata