nextjs-shadcn
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate developer documentation and coding patterns for the shadcn/ui ecosystem.
- [EXTERNAL_DOWNLOADS]: References well-known and trusted developer tools and registries, including bunx, npm, and the official shadcn registry. These are standard in the React/Next.js ecosystem.
- [DYNAMIC_EXECUTION]: One example in the breadcrumb reference uses
dangerouslySetInnerHTMLfor JSON-LD SEO injection, which is a standard React pattern and not used here for obfuscation or malicious execution. - [INDIRECT_PROMPT_INJECTION]: While the skill involves fetching data for UI display (e.g., in the Table component), it includes standard validation patterns (Zod) and adheres to safe data-handling practices. No exploitable surfaces were identified.
Audit Metadata