nuxt-ui
Warn
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION] (MEDIUM): The maintenance script
scripts/generate-components.tsusesexecSyncfrom thenode:child_processmodule to execute shell commands. - Evidence: It invokes
git cloneandgit sparse-checkoutto retrieve external documentation content. - [EXTERNAL_DOWNLOADS] (MEDIUM): The script clones data from an external repository (
https://github.com/nuxt/ui.git) which is not on the predefined list of trusted organizations. - [PROMPT_INJECTION] (SAFE): The documentation content follows standard technical instructional patterns and does not contain attempts to override or bypass AI safety guardrails.
- [DATA_EXFILTRATION] (SAFE): No patterns of sensitive data access (e.g., SSH keys, credentials) or unauthorized network exfiltration were found in the analyzed files.
Audit Metadata