shadcn-ui
Pass
Audited by Gen Agent Trust Hub on May 18, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use the
Bashtool for runningnpx shadcn@latestcommands, which is the standard method for initializing shadcn/ui and adding components to a project. - [EXTERNAL_DOWNLOADS]: The skill utilizes MCP tools and
npxto fetch component source code and documentation from official registries, which is the intended functionality of the shadcn/ui ecosystem. - [SAFE]: All identified code patterns, including React components, utility scripts, and integration workflows, follow established development practices with no signs of malicious intent or security vulnerabilities.
Audit Metadata