shadcn-theming

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill content is limited to CSS and React code for shadcn/ui theming. It uses OKLCH color spaces and Tailwind v4 directives, which are standard practices.
  • [SAFE]: The skill references the next-themes package, a standard and safe Node.js library for handling dark mode in web applications.
  • [INDIRECT_PROMPT_INJECTION]: The skill allows the agent to ingest project data via Read and Glob tools during the explore-codebase workflow step, and to modify the project using Write and Edit tools. This presents a potential surface for indirect injection from malicious local files, though this is a standard risk for development agents. Ingestion points: Codebase exploration via fuse-ai-pilot:explore-codebase. Boundary markers: None. Capability inventory: Write, Edit, Read, Glob, Grep tools. Sanitization: None specified.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 06:13 AM