skills/21st-dev/codex-plugin/21st-cli/Gen Agent Trust Hub

21st-cli

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill documentation describes the use of the 21st CLI (installed via @21st-dev/cli) to perform tasks such as searching the catalog, initializing project configurations (21st init), and installing component skills.
  • [EXTERNAL_DOWNLOADS]: The 21st add command facilitates the retrieval of component code from the 21st.dev registry and initiates the installation of required npm dependencies through the project's native package manager.
  • [CREDENTIALS_UNSAFE]: The skill provides instructions for authenticating with the service, including the use of session tokens stored in ~/.config/21st/auth.json and environment variables such as TWENTYFIRST_TOKEN and API_KEY_21ST. These are standard practices for CLI-based service authentication.
  • [DATA_EXFILTRATION]: The 21st publish and 21st edit commands allow for the transmission of local source code and metadata to the 21st.dev registry, which is the intended mechanism for sharing components with team libraries.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 04:10 PM
Security Audit — agent-trust-hub — 21st-cli