shadcn-motion
Pass
Audited by Gen Agent Trust Hub on Jul 9, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and templates reference several external dependencies and CDNs. These include well-known developer services such as Google Fonts, esm.sh (for loading libraries like Motion and GSAP), and official component registries for Magic UI, Motion Primitives, and Animate UI. These are standard resources in the modern web development ecosystem.
- [COMMAND_EXECUTION]: The skill provides the agent with instructions for standard project setup and dependency management using package managers (pnpm) and the shadcn/ui CLI. These commands are intended for use in the user's development environment to initialize components and libraries.
- [DATA_EXPOSURE]: No hardcoded credentials, sensitive file access, or unauthorized network exfiltration patterns were identified. All network-related instructions pertain to fetching public UI libraries and assets.
- [PROMPT_INJECTION]: The instructions are focused on UI design principles and code generation. There are no attempts to override agent safety guidelines, extract system prompts, or manipulate core agent behavior.
Audit Metadata