tech-logos

Warn

Audited by Gen Agent Trust Hub on Mar 29, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx shadcn@latest add to download components from the @elements registry. This registry is hosted at tryelements.dev, which is an external third-party source that is not a verified or well-known service provider.
  • [REMOTE_CODE_EXECUTION]: Executing npx shadcn add involves running a remote CLI tool that fetches, processes, and integrates code from an external registry into the local project environment. This allows for the integration of remote code that is executed within the user's application context.
  • [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands (e.g., ls registry/default/blocks/logos/ | sed 's/-logo$//') to browse the local file system for available assets.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Mar 29, 2026, 02:05 AM
Security Audit — agent-trust-hub — tech-logos