skills/21st-dev/skill/21st-registry/Gen Agent Trust Hub

21st-registry

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill performs shell commands using the 21st CLI to manage registry assets, including publishing, editing, and deleting components or themes.
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes the content of user-specified files to automatically determine metadata such as component names and tags, which serves as an ingestion point for potentially malicious instructions embedded in code.
  • Ingestion points: User-provided file paths for assets intended for publication (e.g., ./path/to/Component.tsx).
  • Boundary markers: The skill provides instructions to the agent to read the code directly or ask the user for clarification rather than inventing metadata.
  • Capability inventory: Execution of registry management commands through the command line.
  • Sanitization: The instructions include explicit rules forbidding the publication of any files containing secrets, API keys, or uncommitted changes.
  • [EXTERNAL_DOWNLOADS]: The skill makes use of the @21st-dev/cli package, which is the official tool provided by the vendor for interacting with their registry services.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 03:18 AM