widgets-ui
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads UI components from
ui.inference.shusing thenpx shadcncommand. It also references images and documentation fromcloud.inference.shandinference.sh. These are well-known services for AI development and UI components. - [REMOTE_CODE_EXECUTION]: The skill uses
npx shadcn@latest addandnpx skills addto install external components and related skills. While these commands download and execute code locally, they target well-known package registries and authorized skill repositories (belt-sh and inference-sh) which are standard developer workflows.
Audit Metadata