react-shadcn
Pass
Audited by Gen Agent Trust Hub on Apr 3, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The documentation includes standard shell commands for component installation and project initialization using well-known package managers (
npm,bun) and CLI tools (bunx shadcn-ui,npx shadcn). - [EXTERNAL_DOWNLOADS]: Fetches configuration schemas from
ui.shadcn.comand installs components from the official shadcn registry. These are trusted, well-known services within the React development ecosystem. - [REMOTE_CODE_EXECUTION]: Instructions describe the use of the shadcn CLI to fetch and add components to the local codebase. This is the intended and standard functionality of the library and utilizes trusted execution paths.
- [SAFE]: The skill consists entirely of markdown documentation and boilerplate code examples. It contains no executable scripts or logic that handles sensitive data or performs unauthorized operations.
Audit Metadata