search-registry-items

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill guides the agent to execute npx shadcn@latest add shell commands. The command arguments are dynamically populated from the results of the search_registry_items MCP tool. This behavior is the intended functionality for component installation.
  • [EXTERNAL_DOWNLOADS]: The skill interacts with the Shoogle MCP server (mcp.shoogle.dev) to fetch registry data. It also references official documentation hosted on the shadcn-ui GitHub repository, which is a recognized source for this ecosystem.
  • [PROMPT_INJECTION]: Indirect Prompt Injection Surface (Category 8):
  • Ingestion points: The addCommandArgument field returned by the search_registry_items tool output, as documented in references/TOOL-REFERENCE.md.
  • Boundary markers: None; the remote data is interpolated directly into a shell command string.
  • Capability inventory: Shell command execution capability via npx.
  • Sanitization: None; the instructions explicitly state to use the argument verbatim. While this represents a surface for injection if the remote registry service were compromised, it is consistent with the primary purpose of a developer integration tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 06:15 PM
Security Audit — agent-trust-hub — search-registry-items