skills/jezweb/claude-skills/shadcn-ui/Gen Agent Trust Hub

shadcn-ui

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the shadcn CLI tool using pnpm dlx to facilitate component installation from the official registry.- [COMMAND_EXECUTION]: Provides shell commands for installing UI components and standard React ecosystem dependencies like zod and react-hook-form.- [INDIRECT_PROMPT_INJECTION]: The skill provides UI recipes that process data, representing a standard injection surface.
  • Ingestion points: External data is handled in the ContactForm (user inputs), DataTable (data source), and CrudModal (item data) examples in references/recipes.md.
  • Boundary markers: Not present in these UI snippets, which is typical for code examples.
  • Capability inventory: Recipes include fetch calls to relative API endpoints for data submission.
  • Sanitization: The ContactForm recipe correctly utilizes zod for input validation to ensure data safety.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 09:52 PM
Security Audit — agent-trust-hub — shadcn-ui