shadcn-ui
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the
shadcnCLI tool usingpnpm dlxto facilitate component installation from the official registry.- [COMMAND_EXECUTION]: Provides shell commands for installing UI components and standard React ecosystem dependencies likezodandreact-hook-form.- [INDIRECT_PROMPT_INJECTION]: The skill provides UI recipes that process data, representing a standard injection surface. - Ingestion points: External data is handled in the
ContactForm(user inputs),DataTable(data source), andCrudModal(item data) examples inreferences/recipes.md. - Boundary markers: Not present in these UI snippets, which is typical for code examples.
- Capability inventory: Recipes include
fetchcalls to relative API endpoints for data submission. - Sanitization: The
ContactFormrecipe correctly utilizeszodfor input validation to ensure data safety.
Audit Metadata