Shade ShadCN install

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS

Full Analysis

[COMMAND_EXECUTION]: The skill instructs the agent to execute the command pnpm dlx shadcn@latest add <component-name>. This is the standard way to interact with the well-known ShadCN UI library and is consistent with the skill's primary purpose of UI development.
[EXTERNAL_DOWNLOADS]: The pnpm dlx command involves fetching the shadcn package from the official npm registry. This is a well-known service for package management and does not pose a security risk in this context.

Audit Metadata

Risk Level

SAFE

Analyzed

Oct 9, 2026, 08:34 AM