shadcn-tailwind
Pass
Audited by Gen Agent Trust Hub on Mar 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill references the use of
npx shadcnandpnpm dlx shadcnto initialize projects and add components. These are standard and trusted methods for executing the official shadcn-ui CLI tool directly from the npm registry. - [COMMAND_EXECUTION]: The skill provides legitimate CLI commands for managing shadcn/ui components, such as
npx shadcn create,pnpm dlx shadcn@latest add, andnpx shadcn search. These are expected development tools for the described framework. - [SAFE]: No malicious patterns, such as prompt injection, obfuscation, or data exfiltration attempts, were identified. The skill adheres to best practices for Tailwind CSS v4 and React development.
Audit Metadata