shadcn-vue
Pass
Audited by Gen Agent Trust Hub on May 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as a comprehensive guide for developers using shadcn-vue, providing markdown documentation and configuration examples for various UI components.
- [EXTERNAL_DOWNLOADS]: The maintenance script
scripts/generate-components.tsfetches component metadata and content from the officialunovue/shadcn-vueGitHub repository. This is a well-known source and essential for keeping the skill's documentation synchronized with the upstream project. - [COMMAND_EXECUTION]: The instructions recommend standard initialization and component installation via
npx shadcn-vue@latest, which is the official and expected method for this library. - [CREDENTIALS_UNSAFE]: References to
REGISTRY_TOKENandAPI_KEYin the documentation are clearly identified as placeholders for user-provided environment variables in local development, following security best practices for secret management.
Audit Metadata