shadcn-vue

Pass

Audited by Gen Agent Trust Hub on May 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a comprehensive guide for developers using shadcn-vue, providing markdown documentation and configuration examples for various UI components.
  • [EXTERNAL_DOWNLOADS]: The maintenance script scripts/generate-components.ts fetches component metadata and content from the official unovue/shadcn-vue GitHub repository. This is a well-known source and essential for keeping the skill's documentation synchronized with the upstream project.
  • [COMMAND_EXECUTION]: The instructions recommend standard initialization and component installation via npx shadcn-vue@latest, which is the official and expected method for this library.
  • [CREDENTIALS_UNSAFE]: References to REGISTRY_TOKEN and API_KEY in the documentation are clearly identified as placeholders for user-provided environment variables in local development, following security best practices for secret management.
Audit Metadata
Risk Level
SAFE
Analyzed
May 3, 2026, 10:11 AM