shadcn
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses dynamic context injection (the
!command syntax) inSKILL.mdto executenpx shadcn@latest info --jsonwhen the skill is loaded, allowing the agent to immediately understand the project's framework and configuration.\n- [REMOTE_CODE_EXECUTION]: Project management tasks are performed by executing theshadcnpackage via package runners such asnpx,pnpm dlx, andbunx. This behavior is transparently documented and strictly restricted to theshadcnCLI tool through theallowed-toolsfield.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch component documentation, usage examples, and registry metadata from external web resources. These downloads are essential for providing the agent with the correct component APIs and styling patterns.\n- [PROMPT_INJECTION]: The skill processes untrusted data from external URLs and community registries, creating a surface for indirect prompt injection.\n - Ingestion points: Documentation URLs, community registry JSON files, and external example files retrieved via the CLI.\n
- Boundary markers: Absent; the content is ingested directly for project context.\n
- Capability inventory: Command execution is strictly limited to the
shadcn@latestCLI patterns via theallowed-toolsconfiguration.\n - Sanitization: Content is evaluated as technical documentation and UI source code.
Audit Metadata