shadcn
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external registries and documentation URLs. Ingestion occurs via commands like
npx shadcn info,docs, andview. The skill has the capability to write files and perform edits based on this data. To mitigate risk, the instructions explicitly require the agent to review all added files for correctness. - [EXTERNAL_DOWNLOADS]: The skill facilitates downloading UI components from remote registries or arbitrary URLs using the
npx shadcn addcommand. It recommends using--dry-run,--diff, and--viewflags to inspect remote code before installation. - [DYNAMIC_CONTEXT_INJECTION]: The skill executes
npx shadcn@latest infoat load time via the!syntax inSKILL.mdto establish project context, such as framework and import alias configuration.
Audit Metadata