nuxt-ui

Warn

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION] (MEDIUM): The maintenance script scripts/generate-components.ts uses execSync from the node:child_process module to execute shell commands.
  • Evidence: It invokes git clone and git sparse-checkout to retrieve external documentation content.
  • [EXTERNAL_DOWNLOADS] (MEDIUM): The script clones data from an external repository (https://github.com/nuxt/ui.git) which is not on the predefined list of trusted organizations.
  • [PROMPT_INJECTION] (SAFE): The documentation content follows standard technical instructional patterns and does not contain attempts to override or bypass AI safety guardrails.
  • [DATA_EXFILTRATION] (SAFE): No patterns of sensitive data access (e.g., SSH keys, credentials) or unauthorized network exfiltration were found in the analyzed files.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Feb 17, 2026, 05:27 PM