ui-design-system

Pass

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS

Full Analysis

[COMMAND_EXECUTION]: The script scripts/shadcn_add.py uses subprocess.run to execute the npx command for adding components to a project. The command is constructed using a list of arguments, which prevents shell injection, and it targets the official shadcn/ui CLI tool.
[EXTERNAL_DOWNLOADS]: The skill's automation scripts facilitate the installation of UI components from the official shadcn/ui registry. This is a standard and well-known service in the web development ecosystem.

Audit Metadata

Risk Level

SAFE

Analyzed

Jul 31, 2026, 10:19 AM

Security Audit — agent-trust-hub — ui-design-system