shadcn
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security vulnerabilities or malicious patterns were detected in the skill instructions or reference files. The skill focuses on legitimate coding standards and development workflows.
- [EXTERNAL_DOWNLOADS]: The skill correctly guides users to install necessary dependencies using standard package managers (Bun/NPM). Referenced packages include 'tailwindcss', 'shadcn', and '@radix-ui' primitives, which are trusted industry standards.
- [REMOTE_CODE_EXECUTION]: While the skill suggests using 'bunx shadcn@latest', this is the standard and official method for initializing and managing shadcn/ui components. The source is the official registry and does not point to untrusted or obfuscated third-party scripts.
- [COMMAND_EXECUTION]: The shell commands provided (e.g., 'grep', 'find', 'bun run build') are used solely for environment validation and standard build processes. No suspicious command injection or exfiltration patterns were found.
Audit Metadata