taiga-ui-setup

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to check for package existence, install dependencies, and build the project.
  • Commands used: grep, npx ng add, npx ng build, and npx @taiga-ui/mcp init.
  • These are standard operations for an Angular development environment setup.
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to fetch and execute the taiga-ui schematic and the @taiga-ui/mcp initialization tool.
  • The resources @taiga-ui/mcp and taiga-ui originate from the vendor's own namespace and are appropriate for the stated purpose of setting up Taiga UI components.
  • The use of --skip-confirmation with ng add automates the installation process by bypassing manual prompts, which is standard for developer-oriented setup scripts.
  • [PERSISTENCE]: The skill initializes configuration files for various AI-enabled IDEs (Claude, Cursor, VSCode, Windsurf).
  • These operations involve writing JSON or TOML configuration files to local directories (e.g., .vscode/mcp.json, .cursor/mcp.json).
  • These are legitimate configuration steps for the Model Context Protocol (MCP) and do not represent malicious persistence mechanisms.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 03:08 PM