shadcn-ui
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for using the shadcn CLI to install UI components from the official and community registries (ui.shadcn.com and shadcn.io).
- [COMMAND_EXECUTION]: The workflows include standard development commands for package management (bun/npm/npx), TypeScript compilation, and component installation via the shadcn CLI.
- [INDIRECT_PROMPT_INJECTION]: As a framework for building forms and data-driven UIs, the skill facilitates creating surfaces that ingest user data. However, the skill implements best practices for data handling and rendering within React, minimizing the risk of runtime injection vulnerabilities.
Audit Metadata