shadcn-vue-skilld
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches component configuration and source code from the official shadcn-vue registry and public GitHub repositories as part of the tool's standard initialization and component addition workflow.
- [INDIRECT_PROMPT_INJECTION]: Documents the capability to ingest and process component data from external sources including URLs and GitHub repositories. Ingestion points:
addcommand arguments andregistriesconfiguration incomponents.json. Boundary markers: Not applicable to static documentation. Capability inventory: The CLI performs file system writes to project directories and executes package manager commands to install dependencies. Sanitization: Identifies the use of schema validation to ensure the integrity of external data. - [DATA_EXFILTRATION]: Describes the configuration of environment variable interpolation in registry headers for authentication purposes. The skill correctly identifies this as a mechanism for handling sensitive tokens and recommends the use of
.env.localfiles for secure storage.
Audit Metadata