building-react-web-application
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The helper script
scripts/add-registry-component.jsexecutes shell commands to install project dependencies and inspect registry items using package managers (npm, pnpm, yarn, bun) and npx. This is standard behavior for development-time automation tools.\n- [EXTERNAL_DOWNLOADS]: Theadd-registry-component.jsscript fetches remote registry metadata and component source code from external URLs to facilitate the addition of UI primitives to the project. This functionality is the primary purpose of the tool.\n- [REMOTE_CODE_EXECUTION]: The script automates the installation of NPM packages and the writing of remote source code to the localsrc/uidirectory based on external registry data. These actions are standard for component management tools like shadcn/ui and are documented as expected behavior within the skill.
Audit Metadata