shadcn-theming
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill content is limited to CSS and React code for shadcn/ui theming. It uses OKLCH color spaces and Tailwind v4 directives, which are standard practices.
- [SAFE]: The skill references the
next-themespackage, a standard and safe Node.js library for handling dark mode in web applications. - [INDIRECT_PROMPT_INJECTION]: The skill allows the agent to ingest project data via
ReadandGlobtools during theexplore-codebaseworkflow step, and to modify the project usingWriteandEdittools. This presents a potential surface for indirect injection from malicious local files, though this is a standard risk for development agents. Ingestion points: Codebase exploration viafuse-ai-pilot:explore-codebase. Boundary markers: None. Capability inventory:Write,Edit,Read,Glob,Greptools. Sanitization: None specified.
Audit Metadata