📦
Audit History
shadcn - 6 audits
Version comparison
Capability and finding changes across audited versions, newest first.
| Version | Date | Result | Review items | Change vs previous |
|---|---|---|---|---|
| v6 Latest | Jul 23, 2026, 07:45 PM | No confirmed findings | 30 | No capability change |
| v5 | Jul 8, 2026, 06:12 AM | 1 confirmed | 9 | No capability change |
| v4 | Jul 5, 2026, 09:19 PM | No confirmed findings | 22 | No capability change |
| v3 | Jul 5, 2026, 09:19 PM | No confirmed findings | 22 | No capability change |
| v2 | Jun 30, 2026, 11:02 AM | 2 confirmed | 0 | No capability change |
| v1 | Mar 13, 2026, 08:19 AM | No confirmed findings | 0 | Baseline |
Audit version 6 Latest
Jul 23, 2026, 07:45 PM
Most detections are false positives from Markdown, TSX templates, accessibility attributes, documentation links, and relative references. The skill legitimately runs an unpinned shadcn CLI, retrieves remote registry content, and can modify project files. No prompt injection, credential theft, covert persistence, or data-exfiltration intent was found.
13
Files scanned
2,460
Lines analyzed
33
Review items
0
False positives ignored
Capability review items (30)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
High
Ruby/shell backtick execution
!`npx shadcn@latest info --json`
The injection directive automatically executes npx shadcn@latest info --json, downloading mutable code and reading project metadata without a separate prompt.
Medium
Ruby/shell backtick execution
> **IMPORTANT:** Run all CLI commands using the project's package runner: `npx shadcn@latest`, `pnpm
The skill directs agents to execute the mutable shadcn@latest package, creating expected package supply-chain and command-execution exposure.
Medium
Ruby/shell backtick execution
The JSON above contains the project config and installed components. Use `npx shadcn@latest docs <co
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
1. **Use existing components first.** Use `npx shadcn@latest search` to check registries before writ
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
- **Use `asChild` (radix) or `render` (base) for custom triggers.** Check `base` field from `npx sha
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
- **Never decode preset codes or build preset URLs manually.** Use `npx shadcn@latest preset decode
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
- **Apply preset codes directly with the CLI.** Use `npx shadcn@latest apply <code>` for existing pr
The apply and init commands execute a remote CLI and modify project configuration or source files.
Medium
Ruby/shell backtick execution
- **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` v
This instruction can install dependencies with the project package manager, causing network access and project changes.
Medium
Ruby/shell backtick execution
- **`preset`** → resolved preset code and values for the current project. Use `npx shadcn@latest pre
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
Run `npx shadcn@latest docs <component>` to get the URLs for a component's documentation, examples,
This instruction executes the mutable CLI and fetches returned URLs, creating legitimate network and remote-content exposure.
Medium
Ruby/shell backtick execution
**When creating, fixing, debugging, or using a component, always run `npx shadcn@latest docs` and fe
This instruction executes the mutable CLI and fetches returned URLs, creating legitimate network and remote-content exposure.
Medium
Ruby/shell backtick execution
1. **Get project context** — already injected above. Run `npx shadcn@latest info` again if you need
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
3. **Find components** — `npx shadcn@latest search`.
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
4. **Get docs and examples** — run `npx shadcn@latest docs <component>` to get URLs, then fetch them
This instruction executes the mutable CLI and fetches returned URLs, creating legitimate network and remote-content exposure.
Medium
Ruby/shell backtick execution
5. **Install or update** — `npx shadcn@latest add`. When updating existing components, use `--dry-ru
The add command downloads registry content and writes project files. Dry-run and diff guidance reduces this expected risk.
Medium
Ruby/shell backtick execution
6. **Fix imports in third-party components** — After adding components from community registries (e.
The workflow modifies imports in downloaded third-party files and reruns the CLI, creating project-write and dependency trust risk.
Medium
Ruby/shell backtick execution
- **Inspect current preset**: `npx shadcn@latest preset resolve`. Use `--json` when you need structu
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
- **Inspect incoming preset**: `npx shadcn@latest preset decode <code>`. Use `preset url <code>` or
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
- **Overwrite**: `npx shadcn@latest apply <code>`. Overwrites detected components, fonts, and CSS va
The apply command intentionally overwrites components, fonts, and CSS variables after user selection, creating substantial project modification risk.
Medium
Ruby/shell backtick execution
- **Partial**: `npx shadcn@latest apply <code> --only theme,font`. Updates only the selected preset
The partial apply command intentionally rewrites selected theme or font files, creating controlled project modification risk.
Medium
Ruby/shell backtick execution
- **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@l
The merge workflow runs forced initialization and repeated CLI operations that can alter configuration and component files.
Medium
Ruby/shell backtick execution
- **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and
The forced initialization command intentionally updates project configuration and CSS while preserving components.
Medium
Ruby/shell backtick execution
- **Important**: Always run preset commands inside the user's project directory. `apply` only works
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
1. Run `npx shadcn@latest add <component> --dry-run` to see all files that would be affected.
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
2. For each file, run `npx shadcn@latest add <component> --diff <file>` to see what changed upstream
Following this instruction executes the mutable shadcn@latest package. The operation is legitimate but carries package supply-chain and subprocess risk.
Medium
Ruby/shell backtick execution
- User says "just update everything" → use `--overwrite`, but confirm first.
This permits destructive overwrite after explicit user approval. It is expected behavior but remains a project-write risk.
Medium
Ruby/shell backtick execution
```bash
The fenced reference contains executable init, apply, add, search, and view commands that can download content and modify projects.
Low
Hardcoded URL
npx shadcn@latest add https://api.npoint.io/abc123 --dry-run
The documented command retrieves content from a third-party registry URL. Dry-run limits writes, but remote content is still retrieved.
Low
Hardcoded URL
npx shadcn@latest apply --preset "https://ui.shadcn.com/init?base=radix&style=nova&theme=blue&..."
The command passes an official remote preset URL to apply, causing expected network retrieval before project changes.
Low
Hardcoded URL
-> read https://raw.githubusercontent.com/{owner}/{repo}/{sha}/registry.json
The registry workflow retrieves GitHub files at a pinned commit. Network access is intentional, and SHA pinning improves integrity.
Risk Factors
🌐 Network access (14)
📁 Filesystem access (7)
⚙️ External commands (50)
rules/base-vs-radix.md:160-165 rules/styling.md:148-149 SKILL.md:12 SKILL.md:16-17 SKILL.md:17-18 SKILL.md:18-20 SKILL.md:20-24 SKILL.md:24-26 SKILL.md:26 SKILL.md:27 SKILL.md:35-36 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40-41 SKILL.md:41-45 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70-74 SKILL.md:74 SKILL.md:75 SKILL.md:76-80 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:86 SKILL.md:87 SKILL.md:93-126 SKILL.md:126-132 SKILL.md:132-133 SKILL.md:133 SKILL.md:134
Audited by: codex
Jul 8, 2026, 06:12 AM
Most static findings are false positives from Markdown examples, JSX template literals, documentation URLs, and reviewed PNG assets. The real residual risk is intentional shadcn CLI execution through package runners, which can fetch registry content and write project files. No prompt-injection attempt or data-exfiltration intent was found.
13
Files scanned
2,460
Lines analyzed
13
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Broad shadcn CLI Execution Permission
The skill allows Bash access to npx shadcn@latest, pnpm dlx shadcn@latest, and bunx shadcn@latest with wildcard arguments. This is core functionality, but it can fetch registry content and modify project files.
The allowed-tools declaration is explicit, and workflow lines later describe add, init, and apply commands. The risk is real but scoped to the shadcn CLI.
Capability review items (9)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
> **IMPORTANT:** Run all CLI commands using the project's package runner: `npx shadcn@latest`, `pnpm
This line instructs the assistant to execute the shadcn CLI through a package runner. The command is scoped, but it can download code and inspect the project.
Medium
Ruby/shell backtick execution
!`npx shadcn@latest info --json`
This line instructs the assistant to execute the shadcn CLI through a package runner. The command is scoped, but it can download code and inspect the project.
Medium
Ruby/shell backtick execution
- **Apply preset codes directly with the CLI.** Use `npx shadcn@latest apply <code>` for existing pr
This line instructs the assistant to execute the shadcn CLI through a package runner. The command is scoped, but it can download code and inspect the project.
Medium
Ruby/shell backtick execution
- **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` v
This line advises using the project package manager for dependency installs. It may be legitimate, but package installation is a real supply-chain risk.
Medium
Ruby/shell backtick execution
5. **Install or update** — `npx shadcn@latest add`. When updating existing components, use `--dry-ru
This line instructs use of shadcn CLI commands that can modify project files. The behavior is core to the skill, but it is a real filesystem and supply-chain risk.
Medium
Ruby/shell backtick execution
- **Overwrite**: `npx shadcn@latest apply <code>`. Overwrites detected components, fonts, and CSS va
This line instructs use of shadcn CLI commands that can modify project files. The behavior is core to the skill, but it is a real filesystem and supply-chain risk.
Medium
Ruby/shell backtick execution
- **Partial**: `npx shadcn@latest apply <code> --only theme,font`. Updates only the selected preset
This line instructs use of shadcn CLI commands that can modify project files. The behavior is core to the skill, but it is a real filesystem and supply-chain risk.
Medium
Ruby/shell backtick execution
- **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@l
This line instructs use of shadcn CLI commands that can modify project files. The behavior is core to the skill, but it is a real filesystem and supply-chain risk.
Medium
Ruby/shell backtick execution
- **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and
This line instructs use of shadcn CLI commands that can modify project files. The behavior is core to the skill, but it is a real filesystem and supply-chain risk.
Risk Factors
🌐 Network access (14)
📁 Filesystem access (7)
⚙️ External commands (102)
rules/base-vs-radix.md:160-165 rules/styling.md:148-149 SKILL.md:12 SKILL.md:16-17 SKILL.md:17-18 SKILL.md:18-20 SKILL.md:20-24 SKILL.md:24-26 SKILL.md:26 SKILL.md:27 SKILL.md:35-36 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39 SKILL.md:40-41 SKILL.md:41-45 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:50 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:60 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66-67 SKILL.md:67 SKILL.md:68 SKILL.md:69 SKILL.md:70-74 SKILL.md:74 SKILL.md:75 SKILL.md:76-80 SKILL.md:80 SKILL.md:81 SKILL.md:82 SKILL.md:86 SKILL.md:87 SKILL.md:93-126 SKILL.md:126-132 SKILL.md:132-133 SKILL.md:133 SKILL.md:134 SKILL.md:135 SKILL.md:136 SKILL.md:137 SKILL.md:138 SKILL.md:139 SKILL.md:140-141 SKILL.md:141 SKILL.md:142-143 SKILL.md:143 SKILL.md:144 SKILL.md:145 SKILL.md:151 SKILL.md:152 SKILL.md:153 SKILL.md:154-155 SKILL.md:155 SKILL.md:156 SKILL.md:157 SKILL.md:158-159 SKILL.md:159-160 SKILL.md:160 SKILL.md:161 SKILL.md:163-167 SKILL.md:167-169 SKILL.md:169-171 SKILL.md:171-173 SKILL.md:173-177 SKILL.md:177-178 SKILL.md:178 SKILL.md:179-180 SKILL.md:180 SKILL.md:181 SKILL.md:182 SKILL.md:183 SKILL.md:184 SKILL.md:186 SKILL.md:187 SKILL.md:188-189 SKILL.md:189 SKILL.md:190 SKILL.md:191-192 SKILL.md:192 SKILL.md:196 SKILL.md:198-199 SKILL.md:199-203 SKILL.md:203-204 SKILL.md:204-208 SKILL.md:208-259 SKILL.md:259-261 SKILL.md:261 SKILL.md:262 SKILL.md:263
Audited by: codex
Jul 5, 2026, 09:19 PM
Most static findings are false positives from Markdown code spans, component examples, relative documentation links, or public documentation URLs. Confirmed risk remains around unpinned shadcn CLI commands, including one automatic project-context command and workflows that can write project files. No evidence found for prompt injection, credential exfiltration, or malicious hidden behavior.
11
Files scanned
1,813
Lines analyzed
25
Review items
0
False positives ignored
Capability review items (22)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
> **IMPORTANT:** Run all CLI commands using the project's package runner: `npx shadcn@latest`, `pnpm
This instruction tells the assistant to run unpinned package-runner commands such as npx, pnpm dlx, or bunx. Those commands can download and execute external packages.
Medium
Ruby/shell backtick execution
!`npx shadcn@latest info --json 2>/dev/null || echo '{"error": "No shadcn project found. Run shadcn
The skill uses command interpolation to run npx shadcn@latest info automatically. This executes an unpinned package runner in the project context and can inspect local configuration.
Medium
Ruby/shell backtick execution
The JSON above contains the project config and installed components. Use `npx shadcn@latest docs <co
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
1. **Use existing components first.** Use `npx shadcn@latest search` to check registries before writ
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
- **Never decode or fetch preset codes manually.** Pass them directly to `npx shadcn@latest init --p
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` v
This line directs package-manager use for additional dependency installation. That can download external packages and run lifecycle scripts.
Medium
Ruby/shell backtick execution
Run `npx shadcn@latest docs <component>` to get the URLs for a component's documentation, examples,
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
**When creating, fixing, debugging, or using a component, always run `npx shadcn@latest docs` and fe
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
1. **Get project context** — already injected above. Run `npx shadcn@latest info` again if you need
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
3. **Find components** — `npx shadcn@latest search`.
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
4. **Get docs and examples** — run `npx shadcn@latest docs <component>` to get URLs, then fetch them
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
5. **Install or update** — `npx shadcn@latest add`. When updating existing components, use `--dry-ru
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
6. **Fix imports in third-party components** — After adding components from community registries (e.
This workflow follows third-party registry installs with file inspection and import rewrites. It is legitimate but depends on externally fetched files and modifies the project.
Medium
Ruby/shell backtick execution
- **Reinstall**: `npx shadcn@latest init --preset <code> --force --reinstall`. Overwrites all compon
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@l
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **Important**: Always run preset commands inside the user's project directory. The CLI automatical
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
When the user asks to update a component from upstream while keeping their local changes, use `--dry
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
1. Run `npx shadcn@latest add <component> --dry-run` to see all files that would be affected.
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
2. For each file, run `npx shadcn@latest add <component> --diff <file>` to see what changed upstream
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- User says "just update everything" → use `--overwrite`, but confirm first.
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
```bash
The quick reference contains multiple shadcn init, add, search, docs, and view commands. Several can create or modify project files.
Risk Factors
🌐 Network access (9)
📁 Filesystem access (8)
⚙️ External commands (93)
rules/base-vs-radix.md:160-165 rules/styling.md:147-148 SKILL.md:11 SKILL.md:15-16 SKILL.md:16-17 SKILL.md:17-19 SKILL.md:19-23 SKILL.md:23-25 SKILL.md:25 SKILL.md:26 SKILL.md:34-35 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39-40 SKILL.md:40-44 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:53 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:69-73 SKILL.md:73 SKILL.md:74 SKILL.md:75-79 SKILL.md:79-85 SKILL.md:85-118 SKILL.md:118-124 SKILL.md:124-125 SKILL.md:125 SKILL.md:126 SKILL.md:127 SKILL.md:128 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:132-133 SKILL.md:133 SKILL.md:134-135 SKILL.md:135 SKILL.md:136 SKILL.md:142 SKILL.md:143 SKILL.md:144 SKILL.md:145-146 SKILL.md:146 SKILL.md:147 SKILL.md:148 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151 SKILL.md:153-157 SKILL.md:157-159 SKILL.md:159-161 SKILL.md:161-163 SKILL.md:163-167 SKILL.md:167-168 SKILL.md:168 SKILL.md:169-170 SKILL.md:170 SKILL.md:171 SKILL.md:172 SKILL.md:173 SKILL.md:174 SKILL.md:176-177 SKILL.md:177 SKILL.md:178-179 SKILL.md:179 SKILL.md:183 SKILL.md:185-186 SKILL.md:186-190 SKILL.md:190-191 SKILL.md:191-195 SKILL.md:195-227 SKILL.md:227-229 SKILL.md:229 SKILL.md:230 SKILL.md:231
Audited by: codex
Jul 5, 2026, 09:19 PM
Most static findings are false positives from Markdown code spans, component examples, relative documentation links, or public documentation URLs. Confirmed risk remains around unpinned shadcn CLI commands, including one automatic project-context command and workflows that can write project files. No evidence found for prompt injection, credential exfiltration, or malicious hidden behavior.
11
Files scanned
1,813
Lines analyzed
25
Review items
0
False positives ignored
Capability review items (22)
These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.
Medium
Ruby/shell backtick execution
> **IMPORTANT:** Run all CLI commands using the project's package runner: `npx shadcn@latest`, `pnpm
This instruction tells the assistant to run unpinned package-runner commands such as npx, pnpm dlx, or bunx. Those commands can download and execute external packages.
Medium
Ruby/shell backtick execution
!`npx shadcn@latest info --json 2>/dev/null || echo '{"error": "No shadcn project found. Run shadcn
The skill uses command interpolation to run npx shadcn@latest info automatically. This executes an unpinned package runner in the project context and can inspect local configuration.
Medium
Ruby/shell backtick execution
The JSON above contains the project config and installed components. Use `npx shadcn@latest docs <co
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
1. **Use existing components first.** Use `npx shadcn@latest search` to check registries before writ
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
- **Never decode or fetch preset codes manually.** Pass them directly to `npx shadcn@latest init --p
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **`packageManager`** → use this for any non-shadcn dependency installs (e.g. `pnpm add date-fns` v
This line directs package-manager use for additional dependency installation. That can download external packages and run lifecycle scripts.
Medium
Ruby/shell backtick execution
Run `npx shadcn@latest docs <component>` to get the URLs for a component's documentation, examples,
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
**When creating, fixing, debugging, or using a component, always run `npx shadcn@latest docs` and fe
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
1. **Get project context** — already injected above. Run `npx shadcn@latest info` again if you need
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
3. **Find components** — `npx shadcn@latest search`.
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
4. **Get docs and examples** — run `npx shadcn@latest docs <component>` to get URLs, then fetch them
This line instructs the assistant to invoke npx shadcn@latest for docs, search, or info workflows. The behavior is expected but executes an unpinned external CLI.
Medium
Ruby/shell backtick execution
5. **Install or update** — `npx shadcn@latest add`. When updating existing components, use `--dry-ru
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
6. **Fix imports in third-party components** — After adding components from community registries (e.
This workflow follows third-party registry installs with file inspection and import rewrites. It is legitimate but depends on externally fetched files and modifies the project.
Medium
Ruby/shell backtick execution
- **Reinstall**: `npx shadcn@latest init --preset <code> --force --reinstall`. Overwrites all compon
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **Merge**: `npx shadcn@latest init --preset <code> --force --no-reinstall`, then run `npx shadcn@l
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **Skip**: `npx shadcn@latest init --preset <code> --force --no-reinstall`. Only updates config and
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- **Important**: Always run preset commands inside the user's project directory. The CLI automatical
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
When the user asks to update a component from upstream while keeping their local changes, use `--dry
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
1. Run `npx shadcn@latest add <component> --dry-run` to see all files that would be affected.
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
2. For each file, run `npx shadcn@latest add <component> --diff <file>` to see what changed upstream
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
- User says "just update everything" → use `--overwrite`, but confirm first.
This line instructs the assistant to use shadcn CLI workflows that can write, overwrite, or preview project files. The workflow is legitimate but carries filesystem modification risk.
Medium
Ruby/shell backtick execution
```bash
The quick reference contains multiple shadcn init, add, search, docs, and view commands. Several can create or modify project files.
Risk Factors
🌐 Network access (9)
📁 Filesystem access (8)
⚙️ External commands (93)
rules/base-vs-radix.md:160-165 rules/styling.md:147-148 SKILL.md:11 SKILL.md:15-16 SKILL.md:16-17 SKILL.md:17-19 SKILL.md:19-23 SKILL.md:23-25 SKILL.md:25 SKILL.md:26 SKILL.md:34-35 SKILL.md:35 SKILL.md:36 SKILL.md:37 SKILL.md:38 SKILL.md:39-40 SKILL.md:40-44 SKILL.md:44 SKILL.md:45 SKILL.md:46 SKILL.md:47 SKILL.md:48 SKILL.md:49 SKILL.md:53 SKILL.md:54 SKILL.md:55 SKILL.md:56 SKILL.md:57 SKILL.md:58 SKILL.md:59 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66 SKILL.md:67 SKILL.md:68 SKILL.md:69-73 SKILL.md:73 SKILL.md:74 SKILL.md:75-79 SKILL.md:79-85 SKILL.md:85-118 SKILL.md:118-124 SKILL.md:124-125 SKILL.md:125 SKILL.md:126 SKILL.md:127 SKILL.md:128 SKILL.md:129 SKILL.md:130 SKILL.md:131 SKILL.md:132-133 SKILL.md:133 SKILL.md:134-135 SKILL.md:135 SKILL.md:136 SKILL.md:142 SKILL.md:143 SKILL.md:144 SKILL.md:145-146 SKILL.md:146 SKILL.md:147 SKILL.md:148 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151 SKILL.md:153-157 SKILL.md:157-159 SKILL.md:159-161 SKILL.md:161-163 SKILL.md:163-167 SKILL.md:167-168 SKILL.md:168 SKILL.md:169-170 SKILL.md:170 SKILL.md:171 SKILL.md:172 SKILL.md:173 SKILL.md:174 SKILL.md:176-177 SKILL.md:177 SKILL.md:178-179 SKILL.md:179 SKILL.md:183 SKILL.md:185-186 SKILL.md:186-190 SKILL.md:190-191 SKILL.md:191-195 SKILL.md:195-227 SKILL.md:227-229 SKILL.md:229 SKILL.md:230 SKILL.md:231
Audited by: codex
Jun 30, 2026, 11:02 AM
Static analysis produced many hits, but most are false positives from Markdown code fences, prose, URLs, and UI examples. The confirmed risk is legitimate shadcn behavior: package-manager commands, registry access, and project file changes, which warrant a medium-risk warning but do not show malicious intent.
11
Files scanned
1,813
Lines analyzed
5
Review items
3
False positives ignored
Confirmed security concerns (2)
Medium
Package Manager Command Execution
The skill intentionally runs and recommends package-manager commands such as npx, pnpm dlx, and bunx. This is expected for shadcn workflows, but it can fetch packages and modify project files, so users should review commands before execution.
The command strings are explicit and central to the skill workflow. They appear legitimate for shadcn management, but they still execute external tooling and can write files.
Medium
Remote Registry and Documentation Access
The skill documents use of remote URLs for registry items, component docs, examples, and custom registries. This is legitimate, but remote content can affect installed source files and should be inspected before use.
The URLs are visible in documentation and match the advertised registry workflow. No malicious endpoint is evident, but remote registry use is a real supply-chain risk.
Static false positives ignored (3)
These static matches were dismissed by semantic review or matched schema-only tokens, so they are shown for transparency but do not drive the quality score.
Low
Weak Cryptography Detections Are False Positives
The reported weak cryptography hits are in metadata, Markdown prose, or UI examples. I found no cryptographic operation, hashing routine, or security-sensitive crypto choice at the cited locations.
The cited lines contain descriptions or CLI option tables, not cryptographic code. The scanner appears to have matched short substrings inside ordinary text.
Low
Path and Hidden File Detections Are Documentation Context
The path traversal and hidden-file hits are documentation references, such as relative Markdown links and an editor configuration path. They are not runtime path construction or arbitrary file access.
The lines are static documentation examples. They do not read, write, normalize, or execute paths from user-controlled input.
Low
Network Scanner Tool Detections Are Identifier Matches
The network scanning detections occur in icon examples using iconMap and StatusBadge identifiers. I found no network scanning command, target enumeration, or reconnaissance workflow there.
The cited lines are React icon component examples. The suspicious pattern is a substring match inside a variable name, not a tool invocation.
Risk Factors
⚙️ External commands (4)
🌐 Network access (4)
📁 Filesystem access (4)
Detected Patterns
Package Manager Command ExecutionRemote Registry and Documentation Access
Audited by: codex
Mar 13, 2026, 08:19 AM
Audit complete. Static findings are false positives: backticks are markdown code formatting, URLs are documentation links, and cryptographic warnings are triggered by file paths. This is a legitimate UI component library skill with no actual security risks.
11
Files scanned
1,813
Lines analyzed
3
Review items
0
False positives ignored
Risk Factors
⚙️ External commands (884)
cli.md:3 cli.md:5 cli.md:5 cli.md:5 cli.md:5 cli.md:5 cli.md:7 cli.md:20 cli.md:22-24 cli.md:24-26 cli.md:26-30 cli.md:30 cli.md:30-31 cli.md:31 cli.md:31-32 cli.md:32 cli.md:32 cli.md:32-33 cli.md:33 cli.md:33 cli.md:33 cli.md:33-34 cli.md:34 cli.md:34 cli.md:34-35 cli.md:35 cli.md:35-36 cli.md:36 cli.md:36-37 cli.md:37 cli.md:37 cli.md:37-38 cli.md:38-39 cli.md:39 cli.md:39-40 cli.md:40-41 cli.md:41-43 cli.md:43 cli.md:43-45 cli.md:45-47 cli.md:47 cli.md:47 cli.md:47-49 cli.md:49-51 cli.md:51-53 cli.md:53-57 cli.md:57 cli.md:57 cli.md:57-58 cli.md:58 cli.md:58 cli.md:58-59 cli.md:59 cli.md:59-60 cli.md:60 cli.md:60 cli.md:60-61 cli.md:61 cli.md:61-62 cli.md:62 cli.md:62 cli.md:62-63 cli.md:63 cli.md:63-64 cli.md:64 cli.md:64-65 cli.md:65 cli.md:65-69 cli.md:69 cli.md:69 cli.md:69 cli.md:69 cli.md:69-71 cli.md:71-92 cli.md:92-96 cli.md:96-97 cli.md:97-98 cli.md:98-99 cli.md:99 cli.md:99-100 cli.md:100-102 cli.md:102 cli.md:102 cli.md:102 cli.md:102 cli.md:102 cli.md:102 cli.md:102-108 cli.md:108-110 cli.md:110-112 cli.md:112-114 cli.md:114 cli.md:114-118 cli.md:118 cli.md:118-119 cli.md:119 cli.md:119 cli.md:119-120 cli.md:120 cli.md:120 cli.md:120-121 cli.md:121 cli.md:121-123 cli.md:123-125 cli.md:125-127 cli.md:127-129 cli.md:129-131 cli.md:131-133 cli.md:133-135 cli.md:135-139 cli.md:139-141 cli.md:141-151 cli.md:151-153 cli.md:153 cli.md:153-155 cli.md:155-157 cli.md:157-159 cli.md:159-161 cli.md:161-163 cli.md:163-165 cli.md:165-169 cli.md:169 cli.md:169-175 cli.md:175 cli.md:175 cli.md:175 cli.md:175 cli.md:175 cli.md:175-176 cli.md:176 cli.md:176 cli.md:176-177 cli.md:177 cli.md:177 cli.md:177-178 cli.md:178 cli.md:178-179 cli.md:179 cli.md:179-180 cli.md:180 cli.md:180 cli.md:180 cli.md:180-181 cli.md:181 cli.md:181-182 cli.md:182 cli.md:182-183 cli.md:183 cli.md:183 cli.md:183 cli.md:183 cli.md:183-184 cli.md:184 cli.md:184 cli.md:184 cli.md:184 cli.md:184 cli.md:184-190 cli.md:190 cli.md:190 cli.md:190 cli.md:190-191 cli.md:191 cli.md:191 cli.md:191 cli.md:191-192 cli.md:192 cli.md:192-193 cli.md:193 cli.md:193-194 cli.md:194 cli.md:194-195 cli.md:195 cli.md:195-196 cli.md:196 cli.md:196 cli.md:196 cli.md:196-197 cli.md:197 cli.md:197 cli.md:197-198 cli.md:198 cli.md:198 cli.md:198-199 cli.md:199 cli.md:199 cli.md:199-200 cli.md:200 cli.md:200 cli.md:200-201 cli.md:201 cli.md:201 cli.md:201-202 cli.md:202 cli.md:202-203 cli.md:203 cli.md:203-207 cli.md:207 cli.md:207-209 cli.md:209-211 cli.md:211-213 cli.md:213-215 cli.md:215 cli.md:215 cli.md:215-219 cli.md:219 cli.md:219 cli.md:219-220 cli.md:220 cli.md:220-228 cli.md:228-229 cli.md:229-230 cli.md:230-231 cli.md:231-232 cli.md:232-233 cli.md:233-235 cli.md:235 cli.md:235 cli.md:235 cli.md:235 cli.md:235-241 cli.md:241-243 cli.md:243 cli.md:243-244 cli.md:244 cli.md:244-245 cli.md:245-247 cli.md:247-253 cli.md:253-254 cli.md:254 cli.md:254-255 cli.md:255-257 cli.md:257 cli.md:257 cli.md:257 cli.md:257 customization.md:20 customization.md:20 customization.md:21 customization.md:21 customization.md:28 customization.md:28 customization.md:28 customization.md:32 customization.md:32 customization.md:33 customization.md:33 customization.md:34 customization.md:34 customization.md:35 customization.md:35 customization.md:36 customization.md:36 customization.md:37 customization.md:37 customization.md:38 customization.md:38 customization.md:39 customization.md:40 customization.md:41 customization.md:42 customization.md:42 customization.md:43 customization.md:44 customization.md:44 customization.md:46 customization.md:52 customization.md:52 customization.md:54-60 customization.md:60-66 customization.md:66-76 customization.md:76-78 customization.md:78-84 customization.md:84 customization.md:84 customization.md:84-86 customization.md:86-96 customization.md:96-98 customization.md:98-104 customization.md:104-106 customization.md:106 customization.md:106 customization.md:106 customization.md:106-108 customization.md:108-121 customization.md:121-123 customization.md:123-126 customization.md:126-132 customization.md:132 customization.md:132 customization.md:132 customization.md:132 customization.md:132-144 customization.md:144-146 customization.md:146-148 customization.md:148-150 customization.md:150-152 customization.md:152-156 customization.md:156-158 customization.md:158-161 customization.md:161-167 customization.md:167-185 customization.md:185-191 customization.md:191-193 customization.md:193-195 customization.md:195 customization.md:195-197 customization.md:197-200 mcp.md:9-12 mcp.md:12-18 mcp.md:18-19 mcp.md:19-20 mcp.md:20-21 mcp.md:21-22 mcp.md:22-28 mcp.md:28-30 mcp.md:30-32 mcp.md:32 mcp.md:32-36 mcp.md:36-40 mcp.md:40 mcp.md:40 mcp.md:40-42 mcp.md:42-46 mcp.md:46 mcp.md:46 mcp.md:46 mcp.md:46-48 mcp.md:48-52 mcp.md:52 mcp.md:52-54 mcp.md:54-58 mcp.md:58 mcp.md:58 mcp.md:58 mcp.md:58-60 mcp.md:60-64 mcp.md:64 mcp.md:64-66 mcp.md:66-76 mcp.md:76 mcp.md:76-78 mcp.md:78-88 mcp.md:88-90 mcp.md:90-91 mcp.md:91-92 mcp.md:92-94 rules/base-vs-radix.md:3 rules/base-vs-radix.md:3 rules/base-vs-radix.md:3 rules/base-vs-radix.md:3 rules/base-vs-radix.md:18 rules/base-vs-radix.md:18 rules/base-vs-radix.md:22-28 rules/base-vs-radix.md:28-32 rules/base-vs-radix.md:32-36 rules/base-vs-radix.md:36-40 rules/base-vs-radix.md:40-42 rules/base-vs-radix.md:42-44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44 rules/base-vs-radix.md:44-50 rules/base-vs-radix.md:50 rules/base-vs-radix.md:50 rules/base-vs-radix.md:50 rules/base-vs-radix.md:50-52 rules/base-vs-radix.md:52-54 rules/base-vs-radix.md:54-56 rules/base-vs-radix.md:56-60 rules/base-vs-radix.md:60-64 rules/base-vs-radix.md:64-68 rules/base-vs-radix.md:68-72 rules/base-vs-radix.md:72-74 rules/base-vs-radix.md:74 rules/base-vs-radix.md:74-76 rules/base-vs-radix.md:76-81 rules/base-vs-radix.md:81-87 rules/base-vs-radix.md:87-91 rules/base-vs-radix.md:91-95 rules/base-vs-radix.md:95-99 rules/base-vs-radix.md:99-118 rules/base-vs-radix.md:118-122 rules/base-vs-radix.md:122-134 rules/base-vs-radix.md:134-136 rules/base-vs-radix.md:136 rules/base-vs-radix.md:136-138 rules/base-vs-radix.md:138 rules/base-vs-radix.md:138-140 rules/base-vs-radix.md:140-146 rules/base-vs-radix.md:146-152 rules/base-vs-radix.md:152 rules/base-vs-radix.md:152 rules/base-vs-radix.md:152-156 rules/base-vs-radix.md:156-160 rules/base-vs-radix.md:160-165 rules/base-vs-radix.md:165-169 rules/base-vs-radix.md:169-176 rules/base-vs-radix.md:176-182 rules/base-vs-radix.md:182 rules/base-vs-radix.md:182 rules/base-vs-radix.md:182-186 rules/base-vs-radix.md:186-190 rules/base-vs-radix.md:190-194 rules/base-vs-radix.md:194-206 rules/base-vs-radix.md:206-210 rules/base-vs-radix.md:210-222 rules/base-vs-radix.md:222-226 rules/base-vs-radix.md:226-234 rules/base-vs-radix.md:234-244 rules/base-vs-radix.md:244-246 rules/base-vs-radix.md:246-250 rules/base-vs-radix.md:250-252 rules/base-vs-radix.md:252-256 rules/base-vs-radix.md:256-258 rules/base-vs-radix.md:258-260 rules/base-vs-radix.md:260-262 rules/base-vs-radix.md:262-270 rules/base-vs-radix.md:270-276 rules/base-vs-radix.md:276 rules/base-vs-radix.md:276 rules/base-vs-radix.md:276 rules/base-vs-radix.md:276 rules/base-vs-radix.md:276 rules/base-vs-radix.md:276 rules/base-vs-radix.md:276-280 rules/base-vs-radix.md:280-284 rules/base-vs-radix.md:284-288 rules/base-vs-radix.md:288-298 rules/base-vs-radix.md:298-302 rules/base-vs-radix.md:302-306 rules/composition.md:27-32 rules/composition.md:32-36 rules/composition.md:36-43 rules/composition.md:43-49 rules/composition.md:49 rules/composition.md:49 rules/composition.md:49-50 rules/composition.md:50 rules/composition.md:50 rules/composition.md:50 rules/composition.md:50-51 rules/composition.md:51 rules/composition.md:51-52 rules/composition.md:52 rules/composition.md:52-53 rules/composition.md:53 rules/composition.md:53-59 rules/composition.md:59-64 rules/composition.md:64-70 rules/composition.md:70-81 rules/composition.md:81-87 rules/composition.md:87-95 rules/composition.md:95-103 rules/composition.md:103-104 rules/composition.md:104-105 rules/composition.md:105-106 rules/composition.md:106-107 rules/composition.md:107-108 rules/composition.md:108-114 rules/composition.md:114 rules/composition.md:114 rules/composition.md:114 rules/composition.md:114-116 rules/composition.md:116-124 rules/composition.md:124-130 rules/composition.md:130-132 rules/composition.md:132-143 rules/composition.md:143-149 rules/composition.md:149 rules/composition.md:149 rules/composition.md:149-151 rules/composition.md:151-156 rules/composition.md:156-162 rules/composition.md:162 rules/composition.md:162 rules/composition.md:162-164 rules/composition.md:164-172 rules/composition.md:172-178 rules/composition.md:178-180 rules/composition.md:180-185 rules/composition.md:185-193 rules/composition.md:193 rules/composition.md:193 rules/composition.md:193-194 rules/composition.md:194 rules/composition.md:194-195 rules/composition.md:195 rules/forms.md:16 rules/forms.md:16 rules/forms.md:16 rules/forms.md:16 rules/forms.md:18-29 rules/forms.md:29-31 rules/forms.md:31 rules/forms.md:31-35 rules/forms.md:35-36 rules/forms.md:36-37 rules/forms.md:37-38 rules/forms.md:38-39 rules/forms.md:39 rules/forms.md:39-40 rules/forms.md:40-41 rules/forms.md:41 rules/forms.md:41-42 rules/forms.md:42-43 rules/forms.md:43-49 rules/forms.md:49 rules/forms.md:49 rules/forms.md:49-53 rules/forms.md:53-57 rules/forms.md:57-61 rules/forms.md:61-67 rules/forms.md:67-73 rules/forms.md:73 rules/forms.md:73-77 rules/forms.md:77-84 rules/forms.md:84-88 rules/forms.md:88-99 rules/forms.md:99-105 rules/forms.md:105-109 rules/forms.md:109-123 rules/forms.md:123-127 rules/forms.md:127-135 rules/forms.md:135-137 rules/forms.md:137-139 rules/forms.md:139-148 rules/forms.md:148-150 rules/forms.md:150 rules/forms.md:150 rules/forms.md:150-156 rules/forms.md:156 rules/forms.md:156 rules/forms.md:156-158 rules/forms.md:158-169 rules/forms.md:169-175 rules/forms.md:175 rules/forms.md:175 rules/forms.md:175 rules/forms.md:175-177 rules/forms.md:177-190 rules/forms.md:190-192 rules/forms.md:192 rules/forms.md:192 rules/forms.md:192 rules/forms.md:192 rules/forms.md:192 rules/forms.md:192 rules/forms.md:192 rules/forms.md:192 rules/icons.md:3 rules/icons.md:3 rules/icons.md:3 rules/icons.md:3 rules/icons.md:3 rules/icons.md:3 rules/icons.md:3 rules/icons.md:9 rules/icons.md:9 rules/icons.md:13-18 rules/icons.md:18-22 rules/icons.md:22-32 rules/icons.md:32-38 rules/icons.md:38 rules/icons.md:38 rules/icons.md:38 rules/icons.md:38 rules/icons.md:38 rules/icons.md:38-42 rules/icons.md:42-52 rules/icons.md:52-56 rules/icons.md:56-66 rules/icons.md:66-72 rules/icons.md:72-76 rules/icons.md:76-88 rules/icons.md:88-92 rules/icons.md:92-101 rules/styling.md:23-27 rules/styling.md:27-31 rules/styling.md:31-35 rules/styling.md:35-41 rules/styling.md:41-45 rules/styling.md:45-49 rules/styling.md:49-53 rules/styling.md:53-57 rules/styling.md:57-67 rules/styling.md:67-71 rules/styling.md:71-75 rules/styling.md:75-77 rules/styling.md:77-83 rules/styling.md:83 rules/styling.md:83 rules/styling.md:83 rules/styling.md:83-87 rules/styling.md:87-91 rules/styling.md:91-95 rules/styling.md:95-99 rules/styling.md:99-102 rules/styling.md:102 rules/styling.md:102-103 rules/styling.md:103 rules/styling.md:103-110 rules/styling.md:110 rules/styling.md:110 rules/styling.md:110 rules/styling.md:110 rules/styling.md:110-112 rules/styling.md:112-118 rules/styling.md:118-124 rules/styling.md:124 rules/styling.md:124-130 rules/styling.md:130 rules/styling.md:130-136 rules/styling.md:136 rules/styling.md:136-142 rules/styling.md:142-146 rules/styling.md:146-147 rules/styling.md:147-148 rules/styling.md:148-152 rules/styling.md:152-156 rules/styling.md:156-162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 rules/styling.md:162 SKILL.md:11 SKILL.md:11 SKILL.md:11 SKILL.md:11 SKILL.md:11 SKILL.md:15-16 SKILL.md:16-17 SKILL.md:17-19 SKILL.md:19-23 SKILL.md:23-25 SKILL.md:25 SKILL.md:25-26 SKILL.md:26 SKILL.md:26 SKILL.md:26-34 SKILL.md:34-35 SKILL.md:35 SKILL.md:35 SKILL.md:35 SKILL.md:35 SKILL.md:35-36 SKILL.md:36 SKILL.md:36 SKILL.md:36-37 SKILL.md:37 SKILL.md:37-38 SKILL.md:38 SKILL.md:38 SKILL.md:38-39 SKILL.md:39-40 SKILL.md:40-44 SKILL.md:44 SKILL.md:44 SKILL.md:44 SKILL.md:44 SKILL.md:44-45 SKILL.md:45 SKILL.md:45 SKILL.md:45 SKILL.md:45 SKILL.md:45 SKILL.md:45-46 SKILL.md:46 SKILL.md:46-47 SKILL.md:47 SKILL.md:47-48 SKILL.md:48 SKILL.md:48 SKILL.md:48-49 SKILL.md:49 SKILL.md:49 SKILL.md:49 SKILL.md:49 SKILL.md:49 SKILL.md:49 SKILL.md:49 SKILL.md:49-53 SKILL.md:53 SKILL.md:53 SKILL.md:53 SKILL.md:53 SKILL.md:53 SKILL.md:53-54 SKILL.md:54 SKILL.md:54 SKILL.md:54 SKILL.md:54-55 SKILL.md:55 SKILL.md:55 SKILL.md:55 SKILL.md:55-56 SKILL.md:56 SKILL.md:56 SKILL.md:56 SKILL.md:56 SKILL.md:56 SKILL.md:56-57 SKILL.md:57 SKILL.md:57 SKILL.md:57 SKILL.md:57 SKILL.md:57-58 SKILL.md:58 SKILL.md:58 SKILL.md:58-59 SKILL.md:59 SKILL.md:59-63 SKILL.md:63-64 SKILL.md:64-65 SKILL.md:65-66 SKILL.md:66 SKILL.md:66 SKILL.md:66-67 SKILL.md:67 SKILL.md:67 SKILL.md:67-68 SKILL.md:68 SKILL.md:68-69 SKILL.md:69-73 SKILL.md:73 SKILL.md:73 SKILL.md:73 SKILL.md:73-74 SKILL.md:74 SKILL.md:74-75 SKILL.md:75-79 SKILL.md:79-85 SKILL.md:85-118 SKILL.md:118-124 SKILL.md:124-125 SKILL.md:125 SKILL.md:125 SKILL.md:125 SKILL.md:125 SKILL.md:125 SKILL.md:125 SKILL.md:125 SKILL.md:125 SKILL.md:125-126 SKILL.md:126 SKILL.md:126-127 SKILL.md:127 SKILL.md:127 SKILL.md:127 SKILL.md:127-128 SKILL.md:128 SKILL.md:128 SKILL.md:128 SKILL.md:128 SKILL.md:128-129 SKILL.md:129 SKILL.md:129 SKILL.md:129 SKILL.md:129-130 SKILL.md:130 SKILL.md:130 SKILL.md:130 SKILL.md:130 SKILL.md:130-131 SKILL.md:131 SKILL.md:131-132 SKILL.md:132-133 SKILL.md:133 SKILL.md:133 SKILL.md:133 SKILL.md:133 SKILL.md:133 SKILL.md:133-134 SKILL.md:134-135 SKILL.md:135 SKILL.md:135 SKILL.md:135-136 SKILL.md:136 SKILL.md:136 SKILL.md:136-142 SKILL.md:142 SKILL.md:142 SKILL.md:142-143 SKILL.md:143 SKILL.md:143 SKILL.md:143 SKILL.md:143 SKILL.md:143-144 SKILL.md:144 SKILL.md:144 SKILL.md:144 SKILL.md:144 SKILL.md:144-145 SKILL.md:145-146 SKILL.md:146 SKILL.md:146 SKILL.md:146-147 SKILL.md:147 SKILL.md:147 SKILL.md:147-148 SKILL.md:148 SKILL.md:148 SKILL.md:148 SKILL.md:148 SKILL.md:148 SKILL.md:148-149 SKILL.md:149-150 SKILL.md:150-151 SKILL.md:151 SKILL.md:151 SKILL.md:151-153 SKILL.md:153-157 SKILL.md:157-159 SKILL.md:159-161 SKILL.md:161-163 SKILL.md:163-167 SKILL.md:167-168 SKILL.md:168 SKILL.md:168 SKILL.md:168-169 SKILL.md:169-170 SKILL.md:170 SKILL.md:170 SKILL.md:170-171 SKILL.md:171 SKILL.md:171 SKILL.md:171-172 SKILL.md:172 SKILL.md:172 SKILL.md:172 SKILL.md:172 SKILL.md:172 SKILL.md:172-173 SKILL.md:173 SKILL.md:173 SKILL.md:173 SKILL.md:173 SKILL.md:173-174 SKILL.md:174 SKILL.md:174-176 SKILL.md:176-177 SKILL.md:177 SKILL.md:177 SKILL.md:177 SKILL.md:177-178 SKILL.md:178-179 SKILL.md:179 SKILL.md:179 SKILL.md:179 SKILL.md:179 SKILL.md:179-183 SKILL.md:183 SKILL.md:183-185 SKILL.md:185-186 SKILL.md:186-190 SKILL.md:190-191 SKILL.md:191-195 SKILL.md:195-227 SKILL.md:227-229 SKILL.md:229 SKILL.md:229-230 SKILL.md:230 SKILL.md:230 SKILL.md:230 SKILL.md:230 SKILL.md:230 SKILL.md:230 SKILL.md:230-231 SKILL.md:231
🌐 Network access (11)
📁 Filesystem access (8)
Audited by: claude