ui-design-system
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Script
scripts/shadcn_add.pyexecutes thenpx shadcn@latest addcommand viasubprocess.runto install UI components. This is a standard and expected operation for integrating with the framework. - [EXTERNAL_DOWNLOADS]: The component installation process downloads packages from the well-known npm registry.
- [REMOTE_CODE_EXECUTION]: The script uses
npxto execute code hosted on the npm registry, which is the official distribution method for the shadcn CLI. - [INDIRECT_PROMPT_INJECTION]: The
scripts/shadcn_add.pyscript takes component names as input and passes them to a command-execution sink, creating a surface for potential supply-chain attacks if names are untrusted. (Evidence Chain: 1. Ingestion inscripts/shadcn_add.pyCLI args. 2. No boundary markers. 3. Capability to execute commands viasubprocess.run. 4. No specific validation of names.)
Audit Metadata