shadcn
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes shell scripts (audit-theme.sh, diff-all.sh, project-state.sh) that execute shell commands to perform local project auditing and state inspection. These scripts use standard unix tools like grep, sed, and ls.
- [EXTERNAL_DOWNLOADS]: The skill documentation and associated scripts rely on npx shadcn@latest to download and execute the shadcn CLI. It also documents the capability to install components from remote registry URLs.
- [INDIRECT_PROMPT_INJECTION]: The utility scripts ingest data from project configuration files (components.json and package.json). While these files represent untrusted ingestion points, the risk is low given the skill's intended purpose of managing project-specific UI components.
- [DYNAMIC_EXECUTION]: Several scripts utilize python3 -c to dynamically parse JSON content from project files to extract configuration values. This is a common and low-risk pattern for shell scripts to process structured data.
Audit Metadata