tailwind-v4-shadcn
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides structured documentation and templates for initializing React projects with Tailwind v4 and shadcn/ui. The code templates for Vite, TypeScript, and CSS variables align with industry best practices and official documentation.
- [EXTERNAL_DOWNLOADS]: The skill references standard, widely-used developer tools and libraries from the NPM registry, such as
tailwindcss,vite, and@radix-ui. These are well-known services and do not pose a security risk in this context. - [COMMAND_EXECUTION]: The instructions include standard project initialization commands, specifically the use of the
shadcnCLI runner viapnpm dlx. These commands are typical for the described development workflow. - [INDIRECT_PROMPT_INJECTION]: The skill generates project configuration files based on internal templates. These templates are static and intended to scope the agent's work to a specific framework architecture, without creating mechanisms for processing untrusted external inputs into executable actions.
Audit Metadata