Skills
skills/louisyoungx/taro-shadcn/taro-shadcn-cli-helper/Gen Agent Trust Hub

taro-shadcn-cli-helper

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The CLI tool (packages/cli/src/index.ts) uses execSync to run package manager commands (e.g., npm install, pnpm add). This is standard behavior for a development utility designed to manage project dependencies. The packages installed are either base requirements (like clsx and tailwind-merge) or specific component dependencies (like date-fns).
  • [EXTERNAL_DOWNLOADS]: The CLI tool downloads dependencies from the official npm registry. Additionally, several UI components and documentation pages reference external assets such as images from GitHub and Unsplash. These sources are well-known and consistent with the skill's primary purpose as a UI framework.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 11:36 AM
Security Audit — agent-trust-hub — taro-shadcn-cli-helper