Widgets Ui

• Risk level: Low
• Analyzed: Feb 18, 2026, 8:31 AM
• Findings: 0
• Version: 0.1.5

Overview

The skill's instructions, requirements, and external references are coherent with a declarative UI widget renderer for React/Next.js; it is an instruction-only integration that does not request unrelated credentials or privileged/system access.

This instruction-only skill appears internally consistent with its purpose. Things to consider before installing or executing the suggested commands: (1) npx executes code fetched from the network — only run it if you trust shadcn and the referenced URL (https://ui.inference.sh). (2) The skill package has no homepage/source in the metadata, so provenance is limited; review the remote widgets.json and any code it installs before running. (3) Import paths shown (e.g., @/registry/blocks/...) assume a particular project layout—ensure they match your repo. If you want additional assurance, inspect the remote URL and the shadcn package contents locally before running npx.