ui-styling
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/shadcn_add.pyusessubprocess.run()to execute thenpx shadcncommand. This is used to programmatically add UI components to a project. The implementation uses argument lists rather than shell strings, which is a secure practice for command execution. - [EXTERNAL_DOWNLOADS]: The automation scripts invoke
npx, which downloads the latest version of theshadcnCLI from the npm registry. This is the standard and documented method for using this tool. The skill also provides links to official documentation for Tailwind CSS and shadcn/ui. - [SAFE]: The Python scripts use only standard library modules for their core logic. The included binary file
scripts/.coverageis a standard SQLite database generated by Python testing tools (coverage.py) and does not contain executable code or sensitive information.
Audit Metadata