shadcn
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands to interact with the shadcn CLI for project management, such as
npx shadcn@latest infoto retrieve project configuration andnpx shadcn@latest searchto find components. - [EXTERNAL_DOWNLOADS]: The skill is instructed to fetch documentation and implementation examples from well-known and official domains like
ui.shadcn.comand GitHub repositories associated with the library. - [REMOTE_CODE_EXECUTION]: Interaction with the shadcn ecosystem is handled through package runners (e.g.,
npx shadcn@latest), which is the standard, official method for executing the toolset and is considered safe when targeting the verified package.
Audit Metadata