21st-registry
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill performs shell commands using the
21stCLI to manage registry assets, including publishing, editing, and deleting components or themes. - [INDIRECT_PROMPT_INJECTION]: The skill analyzes the content of user-specified files to automatically determine metadata such as component names and tags, which serves as an ingestion point for potentially malicious instructions embedded in code.
- Ingestion points: User-provided file paths for assets intended for publication (e.g., ./path/to/Component.tsx).
- Boundary markers: The skill provides instructions to the agent to read the code directly or ask the user for clarification rather than inventing metadata.
- Capability inventory: Execution of registry management commands through the command line.
- Sanitization: The instructions include explicit rules forbidding the publication of any files containing secrets, API keys, or uncommitted changes.
- [EXTERNAL_DOWNLOADS]: The skill makes use of the
@21st-dev/clipackage, which is the official tool provided by the vendor for interacting with their registry services.
Audit Metadata