create-custom-ui-registry

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Uses the GitHub CLI (gh) to programmatically create public repositories and push source code, which is essential for hosting the static registry on GitHub Pages.
  • [REMOTE_CODE_EXECUTION]: Leverages npx to execute the latest versions of the shadcn and create-ec-app command-line utilities for registry construction and consumer-side verification.
  • [EXTERNAL_DOWNLOADS]: Clones a foundational registry template from the shadcn-ui repository on GitHub to initialize the project structure.
  • [COMMAND_EXECUTION]: Runs a local utility script (scripts/derive-registry-config.mjs) to generate configuration objects and registry manifests from user-provided inputs like registry name and GitHub owner.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 09:24 AM
Security Audit — agent-trust-hub — create-custom-ui-registry