building-components
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for fetching UI primitives and components from external registries and package managers. This includes examples of installing libraries like
@radix-ui/react-slotand@radix-ui/react-use-controllable-statevia npm, as well as using theshadcnCLI to fetch component source code from remote URLs (e.g.,npx shadcn@latest add <url>). These are standard practices for the referenced component distribution models. - [COMMAND_EXECUTION]: The documentation includes terminal commands for development and deployment workflows, such as
vercel --prodfor deploying registries to Vercel andnpx shadcn@latest addfor component integration. These commands are typical for the ecosystems described in the guides. - [SAFE]: All referenced external services (e.g., Vercel, Radix UI, shadcn/ui, 21st.dev) and documentation frameworks (e.g., Docusaurus, VitePress, Fumadocs) are well-known and reputable within the software development community. The skill focuses purely on architectural best practices and instructional content.
Audit Metadata