shadcn
Pass
Audited by Gen Agent Trust Hub on Jun 21, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the shadcn CLI via package runners (npx, pnpm dlx, bunx) to perform project operations such as
init,add,search, andinfo. - [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch documentation and examples from official sources like
ui.shadcn.comand GitHub to ensure accurate component implementation. - [DYNAMIC_CONTEXT_INJECTION]: The
SKILL.mdfile uses the platform's dynamic command execution syntax (!npx shadcn@latest info --json) to automatically retrieve project configuration and component metadata when the skill is loaded. - [REMOTE_CODE_EXECUTION]: The skill relies on running the latest version of the
shadcnpackage remotely vianpxto ensure the agent uses the most up-to-date CLI features and registry data.
Audit Metadata