shadcn-registry

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx shadcn to perform registry management tasks, including project initialization, building registry artifacts, and installing components. These are standard operations for developers using the shadcn ecosystem.
  • [EXTERNAL_DOWNLOADS]: The skill references official registry schemas from ui.shadcn.com and provides instructions for hosting registry files on well-known platforms like GitHub, Vercel, and Netlify. These are legitimate development resources.
  • [CREDENTIALS_SAFE]: Explicit instructions are provided to use environment variables for private registry access tokens instead of committing them to version control, which aligns with security best practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 09:28 AM