shadcn-ui
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides expert guidance for the legitimate and widely-used shadcn/ui framework. All instructions and examples align with official documentation and standard React/Tailwind development practices.
- [COMMAND_EXECUTION]: The skill correctly utilizes the official shadcn CLI via
npx shadcn@latestfor component initialization and installation. These commands are standard for the tool's ecosystem. - [EXTERNAL_DOWNLOADS]: All external references point to official or trusted developer resources, including ui.shadcn.com, radix-ui.com, tailwindcss.com, and the official shadcn-ui GitHub organization.
- [COMMAND_EXECUTION]: The included verification script (
scripts/verify-setup.sh) is a benign utility designed to validate local project configuration files (e.g.,components.json,tailwind.config.js). It performs read-only checks within the project directory and does not exhibit malicious behavior. - [DATA_EXFILTRATION]: No sensitive file access or unauthorized network operations were detected. The allowed tools (Bash, web_fetch) are consistent with the skill's purpose of project setup and documentation retrieval.
Audit Metadata