tech-logos
Warn
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npx shadcn@latest addto download components from the@elementsregistry. This registry is hosted attryelements.dev, which is an external third-party source that is not a verified or well-known service provider. - [REMOTE_CODE_EXECUTION]: Executing
npx shadcn addinvolves running a remote CLI tool that fetches, processes, and integrates code from an external registry into the local project environment. This allows for the integration of remote code that is executed within the user's application context. - [COMMAND_EXECUTION]: The skill provides instructions to execute shell commands (e.g.,
ls registry/default/blocks/logos/ | sed 's/-logo$//') to browse the local file system for available assets.
Audit Metadata