taiga-ui-setup
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to check for package existence, install dependencies, and build the project.
- Commands used:
grep,npx ng add,npx ng build, andnpx @taiga-ui/mcp init. - These are standard operations for an Angular development environment setup.
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute thetaiga-uischematic and the@taiga-ui/mcpinitialization tool. - The resources
@taiga-ui/mcpandtaiga-uioriginate from the vendor's own namespace and are appropriate for the stated purpose of setting up Taiga UI components. - The use of
--skip-confirmationwithng addautomates the installation process by bypassing manual prompts, which is standard for developer-oriented setup scripts. - [PERSISTENCE]: The skill initializes configuration files for various AI-enabled IDEs (Claude, Cursor, VSCode, Windsurf).
- These operations involve writing JSON or TOML configuration files to local directories (e.g.,
.vscode/mcp.json,.cursor/mcp.json). - These are legitimate configuration steps for the Model Context Protocol (MCP) and do not represent malicious persistence mechanisms.
Audit Metadata