shadcn-vue-skilld

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a reference manual for developers using shadcn-vue. The content consists entirely of markdown documentation and code examples for standard UI development workflows.
  • [EXTERNAL_DOWNLOADS]: The documentation references the installation of standard, well-known web development dependencies such as reka-ui, lucide-vue-next, tailwindcss, and @vueuse/core. It also documents the use of the shadcn-vue CLI via npx, which is the standard distribution method for this tool.
  • [COMMAND_EXECUTION]: The skill provides documentation for standard shell commands used in the Vue/Nuxt ecosystem (e.g., npm install, npx shadcn-vue init). There are no instructions for the agent to execute arbitrary or suspicious background commands.
  • [CREDENTIALS_UNSAFE]: References to tokens and API keys in the documentation (e.g., in the MCP server section) are provided as placeholders or examples of standard environment variable configuration. The skill correctly instructs users to manage these via .env.local files, which is a secure practice.
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guardrails, or extract system prompts were found. The instructional language is consistent with technical documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 07:12 AM