zod-to-form-cli
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references several trusted and well-known services for component installation and framework configuration.
- Fetches and initializes projects using official CLIs from
shadcn,vitest,vite,next.js, andnpm/npxregistries. - References official documentation and source repositories from trusted organizations including
shadcn-ui,vitest-dev,radix-ui,tailwindlabs, andtanstack. - Provides instructions for installing development dependencies such as
@zod-to-form/cli,vitest, and various Radix UI primitives from the NPM registry. - [COMMAND_EXECUTION]: The skill includes a utility script and documentation that execute standard system and development commands.
.agents/skills/shadcn-ui/scripts/verify-setup.sh: A Bash script that performs local environment checks to validate the presence of configuration files (components.json,tailwind.config.js,tsconfig.json,package.json), directory structures, and required code snippets like thecn()utility. It uses standard commands likegrep,find, andwcfor verification.- The documentation describes various
npxcommands for component management, project initialization, and form generation (e.g.,npx shadcn@latest init,npx zodform generate). - [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration were detected. All described behaviors align with the primary purpose of helping developers set up UI components and testing environments. References to external tools and organizations are limited to industry-standard providers.
Audit Metadata