ui-styling

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: No malicious patterns, prompt injections, or obfuscation techniques were detected in the skill instructions or scripts.
  • [COMMAND_EXECUTION]: The script scripts/shadcn_add.py programmatically calls the shadcn CLI using subprocess.run. This is a standard automation practice and is implemented securely using a list of arguments to avoid shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch UI components from the official shadcn/ui registry. This is a well-known service for JavaScript development and is used here according to its intended purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 09:44 AM
Security Audit — agent-trust-hub — ui-styling