ui-styling
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/shadcn_add.pyuses the Pythonsubprocessmodule to run thenpx shadcn@latestcommand. - Evidence:
subprocess.run(cmd, cwd=self.project_root, capture_output=True, text=True, check=True)inscripts/shadcn_add.py. - Context: This command is used to programmatically add UI components from the community-standard shadcn/ui library into the user's project.
- [EXTERNAL_DOWNLOADS]: The skill automates the download and execution of the shadcn/ui CLI tool via the Node.js package runner (
npx). - Evidence: Use of
npx shadcn@latest addinSKILL.mdandscripts/shadcn_add.py. - Context: This is the official and standard method for managing shadcn/ui components. The packages are sourced from the official NPM registry.
Audit Metadata