ui-styling

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/shadcn_add.py uses the subprocess.run method to execute component installation commands via npx. The implementation correctly uses a list for the command arguments, which prevents shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of UI components and configurations from well-known and trusted frontend development ecosystems, specifically shadcn/ui and Tailwind CSS, using standard package managers like npm and npx.
  • [COMMAND_EXECUTION]: The utility script scripts/tailwind_config_gen.py manages project setup by dynamically generating and writing Tailwind CSS configuration files to the project root. This file-writing behavior is consistent with the skill's stated purpose of automating UI styling configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 01:36 AM
Security Audit — agent-trust-hub — ui-styling