shadcn-tailwind
Warn
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run various shell commands for project initialization and component management, including
npx shadcn@latest initandnpm install. - [DYNAMIC_EXECUTION]: The documentation directs the agent to execute specific Python scripts (
scripts/shadcn_add.pyandscripts/tailwind_config_gen.py) shipped with the skill. As these scripts' source code is not included in the provided analysis context, their behavior remains unverified. - [EXTERNAL_DOWNLOADS]: The
install_commandin the skill metadata usescurlto fetch the skill definition from the author's GitHub repository. - [INDIRECT_PROMPT_INJECTION]: The skill architecture relies on a series of reference documents (e.g.,
references/shadcn-components.md) that are used as instructions for the agent, creating a surface where malicious content could influence the agent's behavior. - Ingestion points: Multiple markdown files located in the
references/directory as specified in the SKILL.md file. - Boundary markers: None; the instructions are directly consumed as authoritative context.
- Capability inventory: The skill provides the ability to execute both shell commands and Python scripts.
- Sanitization: No content validation or sanitization process for the referenced files is mentioned.
Audit Metadata