shadcn-vue-skilld
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a reference manual for developers using shadcn-vue. The content consists entirely of markdown documentation and code examples for standard UI development workflows.
- [EXTERNAL_DOWNLOADS]: The documentation references the installation of standard, well-known web development dependencies such as
reka-ui,lucide-vue-next,tailwindcss, and@vueuse/core. It also documents the use of theshadcn-vueCLI vianpx, which is the standard distribution method for this tool. - [COMMAND_EXECUTION]: The skill provides documentation for standard shell commands used in the Vue/Nuxt ecosystem (e.g.,
npm install,npx shadcn-vue init). There are no instructions for the agent to execute arbitrary or suspicious background commands. - [CREDENTIALS_UNSAFE]: References to tokens and API keys in the documentation (e.g., in the MCP server section) are provided as placeholders or examples of standard environment variable configuration. The skill correctly instructs users to manage these via
.env.localfiles, which is a secure practice. - [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guardrails, or extract system prompts were found. The instructional language is consistent with technical documentation.
Audit Metadata