ask-shadcn-mechanic
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected across any threat category.
- [COMMAND_EXECUTION]: The skill mentions the use of
npx shadcn@latest add [component]within its instructions for component upgrades. This is the standard, documented method for using the official shadcn/ui CLI and does not constitute a security risk in this context. - [DATA_EXPOSURE]: The skill instructions emphasize using semantic CSS variables and proper form wiring, which promotes secure data handling and UI consistency.
- [NO_CODE]: The included helper script
scripts/helper.jsperforms basic regex-based validation of JSX strings to ensure the agent follows the skill's style guidelines (e.g., checking for hardcoded colors or inline styles).
Audit Metadata