skills/openaec-foundation/shadcn-ui-claude-skill-package/shadcn-impl-component-install/Gen Agent Trust Hub
shadcn-impl-component-install
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data access were detected. The skill provides legitimate documentation and instructions for the shadcn CLI.
- [COMMAND_EXECUTION]: The skill instructs the user to run development commands such as
pnpm dlx shadcn@latest initandpnpm dlx shadcn@latest add. These are standard invocations for the shadcn toolchain. - [EXTERNAL_DOWNLOADS]: The skill documents how the CLI fetches component definitions from the official shadcn registry (
ui.shadcn.com) and supports custom registries. It correctly advises users to use environment variable interpolation (e.g.,${REGISTRY_TOKEN}) to manage secrets safely without hardcoding them in configuration files. - [REMOTE_CODE_EXECUTION]: The use of
pnpm dlx shadcn@latestinvolves running code from a remote package repository (npm). This is the standard, documented method for using this well-known and trusted development tool.
Audit Metadata