ui-styling
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The scripts/shadcn_add.py utility script uses the Python subprocess module to execute npx shadcn for component management. This is a standard operation within the intended UI styling workflow.
- [REMOTE_CODE_EXECUTION]: The skill uses the npx package runner to execute the shadcn CLI from the npm registry. npm is a well-known service and this behavior is essential for the skill's functionality.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the download of UI components and references font assets.
- [SAFE]: The scripts/tailwind_config_gen.py script programmatically generates configuration files and includes a security check to ensure that plugin names are valid npm package names, mitigating the risk of code injection.
Audit Metadata