launch-shadcn-registry
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local shell script (
scripts/validate-registry.sh) to perform preflight validation of the registry. The script usescurlto verify reachability andpython3to validate the JSON structure of the registry files. - [COMMAND_EXECUTION]: Utilizes
gitand the GitHub CLI (gh) to automate forking repositories, managing branches, and creating pull requests for directory submissions. These operations are performed within a temporary directory and require explicit user approval. - [EXTERNAL_DOWNLOADS]: Fetches the official community registry directory from the
shadcn-ui/uiGitHub repository usingcurlto check for duplicate scope names during the preflight phase. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from user-supplied registry URLs and repository content. This represents a standard attack surface for indirect prompt injection, which the skill mitigates by using structured JSON validation and predefined templates for all generated pull request bodies and social media drafts.
Audit Metadata