better-design-shadcn-themes

Warn

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions and examples for downloading UI component definitions from an external domain:
  • https://www.better-design.com/registry/<design-system>/<component>.json (e.g., linear, stripe, apple, notion).
  • [REMOTE_CODE_EXECUTION]: The skill promotes the use of the shadcn CLI to fetch and integrate remote code into the user's project:
  • Command: npx shadcn@latest add https://www.better-design.com/registry/<design-system>/<component>.json.
  • This command downloads TypeScript/React code and configuration from the remote URL and writes it to the local file system. The downloaded code is then executed as part of the user's application build process.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 15, 2026, 01:18 PM