shadcn-registry
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
npx shadcnto perform registry management tasks, including project initialization, building registry artifacts, and installing components. These are standard operations for developers using the shadcn ecosystem. - [EXTERNAL_DOWNLOADS]: The skill references official registry schemas from
ui.shadcn.comand provides instructions for hosting registry files on well-known platforms like GitHub, Vercel, and Netlify. These are legitimate development resources. - [CREDENTIALS_SAFE]: Explicit instructions are provided to use environment variables for private registry access tokens instead of committing them to version control, which aligns with security best practices.
Audit Metadata