21st-cli
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill documentation describes the use of the
21stCLI (installed via@21st-dev/cli) to perform tasks such as searching the catalog, initializing project configurations (21st init), and installing component skills. - [EXTERNAL_DOWNLOADS]: The
21st addcommand facilitates the retrieval of component code from the 21st.dev registry and initiates the installation of required npm dependencies through the project's native package manager. - [CREDENTIALS_UNSAFE]: The skill provides instructions for authenticating with the service, including the use of session tokens stored in
~/.config/21st/auth.jsonand environment variables such asTWENTYFIRST_TOKENandAPI_KEY_21ST. These are standard practices for CLI-based service authentication. - [DATA_EXFILTRATION]: The
21st publishand21st editcommands allow for the transmission of local source code and metadata to the 21st.dev registry, which is the intended mechanism for sharing components with team libraries.
Audit Metadata