building-components

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for fetching UI primitives and components from external registries and package managers. This includes examples of installing libraries like @radix-ui/react-slot and @radix-ui/react-use-controllable-state via npm, as well as using the shadcn CLI to fetch component source code from remote URLs (e.g., npx shadcn@latest add <url>). These are standard practices for the referenced component distribution models.
  • [COMMAND_EXECUTION]: The documentation includes terminal commands for development and deployment workflows, such as vercel --prod for deploying registries to Vercel and npx shadcn@latest add for component integration. These commands are typical for the ecosystems described in the guides.
  • [SAFE]: All referenced external services (e.g., Vercel, Radix UI, shadcn/ui, 21st.dev) and documentation frameworks (e.g., Docusaurus, VitePress, Fumadocs) are well-known and reputable within the software development community. The skill focuses purely on architectural best practices and instructional content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 01:06 PM