building-components
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions for installing components from external registries and marketplaces using the shadcn CLI pattern. This involves fetching source code from remote URLs like 21st.dev or custom Vercel deployments.
- Evidence:
references/docs.mdx,references/marketplaces.mdx, andreferences/registry.mdxshow examples likenpx shadcn@latest add https://21st.dev/r/haydenbleasel/dialog-stackandnpx shadcn@latest add https://your-project-name.vercel.app/metric-card.json. - [EXTERNAL_DOWNLOADS]: The skill recommends several well-known third-party libraries for component development.
- Evidence: Mentions
@radix-ui/react-slot,tailwind-merge,clsx, andclass-variance-authority. - [SAFE]: The skill's content is entirely instructional, focusing on software engineering principles and architectural patterns without any automated execution of dangerous code.
Audit Metadata