tailwind-v4-shadcn
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation provides standard project initialization commands, including 'bun add' for dependency management and 'rm tailwind.config.ts' to transition to Tailwind v4's CSS-first configuration. These operations are restricted to the project root and align with the skill's stated purpose.- [EXTERNAL_DOWNLOADS]: The skill references and installs official packages from the NPM registry and provides links to reputable documentation sites such as tailwindcss.com and ui.shadcn.com. It also includes a reference to a production demo hosted on Cloudflare Workers, a well-known and trusted platform.- [REMOTE_CODE_EXECUTION]: The setup instructions include the use of 'pnpm dlx shadcn@latest init', which downloads and executes the official shadcn CLI tool. This is a standard and safe procedure for initializing this specific UI library.- [PROMPT_INJECTION]: The SKILL.md file contains instructions for AI agents to prioritize the skill's patterns and announce their use. These are instructional guidelines designed to ensure that the agent provides the user with the specific architectures required for Tailwind v4 compatibility rather than relying on outdated general knowledge.
Audit Metadata