ui-styling

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/shadcn_add.py uses the subprocess module to programmatically execute the shadcn CLI for adding components to a project. The execution is handled safely by passing arguments as a list and avoiding shell interpretation.
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions and automation for fetching UI components and development dependencies from the npm registry using npm and npx commands. These downloads target established open-source tools and libraries.
  • [SAFE]: The skill demonstrates secure coding practices, such as using structured argument passing for subprocess calls to prevent command injection and adhering to official installation methods for third-party libraries. No obfuscation, data exfiltration, or persistence mechanisms were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 06:52 PM
Security Audit — agent-trust-hub — ui-styling