shadcn-component-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for utilizing the
shadcnCLI to perform component discovery, viewing, and listing operations. - [EXTERNAL_DOWNLOADS]: Recommends various community-maintained shadcn registries (e.g., Magic UI, Aceternity, ReUI) for extending UI capabilities. The documentation explicitly advises users to verify the health and maintenance status of these external sources.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-provided UI descriptions to search for matching components.
- Ingestion points: User-provided descriptions of UI functionality and style requirements specified in
SKILL.md. - Boundary markers: Implements a mandatory clarification step to confirm requirements before initiating searches.
- Capability inventory: Orchestrates the use of
npx shadcncommands and specialized MCP search tools. - Sanitization: Directs the agent to curate search results for relevance and brevity rather than outputting raw data.
Audit Metadata