shadcn-ui-design
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected.
- [COMMAND_EXECUTION]: The skill provides standard instructions for initializing a Next.js project using established tools like
npx create-next-appandnpx shadcn@latest. These are legitimate development workflows. - [DYNAMIC_EXECUTION]: A Python script
scripts/generate-tokens.pyis included to convert Figma design tokens into CSS and Markdown documentation. The script was analyzed and found to be transparent, performing only local mathematical conversions and file writes within the skill's own directory without any network or obfuscated operations.
Audit Metadata