react
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use standard system commands (
cat,grep) for stack detection within the project files (package.json,components.json,next.config.js). It also utilizes specialized development commands likenext buildandnext startfor performance measurement workflows. - [EXTERNAL_DOWNLOADS]: The skill workflow for shadcn/ui components involves the use of
npx shadcn@latest, and the Next.js upgrade workflow usesnpx @next/codemod@latest. These are standard, well-known developer tools in the React ecosystem used for project initialization, component management, and automated migrations. - [DATA_EXPOSURE]: The skill includes a debugging command targeting the Next.js Model Context Protocol (MCP) endpoint on
localhost. This is a local diagnostic operation used to retrieve source-mapped error stacks and project metadata during development, posing no external data exposure risk.
Audit Metadata