ui-styling
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/shadcn_add.pyuses thesubprocessmodule to programmatically execute theshadcnCLI for adding components to a project. The execution is handled safely by passing arguments as a list and avoiding shell interpretation. - [EXTERNAL_DOWNLOADS]: The skill includes instructions and automation for fetching UI components and development dependencies from the npm registry using
npmandnpxcommands. These downloads target established open-source tools and libraries. - [SAFE]: The skill demonstrates secure coding practices, such as using structured argument passing for subprocess calls to prevent command injection and adhering to official installation methods for third-party libraries. No obfuscation, data exfiltration, or persistence mechanisms were found.
Audit Metadata