migrate-radix-to-base
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches component registry JSON files from
ui.shadcn.com. This is a well-known service in the React ecosystem for distributing UI components, and the download is used to obtain the target code for the migration process. - [COMMAND_EXECUTION]: The instructions involve the use of standard development CLI tools:
npx shadcnfor project discovery and component updates,git merge-filefor automated three-way merging of customized components, andgrepfor identifying remaining dependencies. These commands are used appropriately for the skill's stated purpose of refactoring source code. - [DATA_EXPOSURE]: The skill reads project source files and
node_modulesfor type verification and writes migration audit reports to a local.migration/directory. These operations are transparent and necessary for the migration workflow.
Audit Metadata