21st-cli-use

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.65). The required workflow is the 21st CLI’s runtime operations (e.g., 21st get / 21st add / 21st theme) that fetch catalog component/theme code from the 21st.dev registry (public/unvetted outsider-authored content) and then writes/prints it for the agent/LLM context, creating an indirect prompt-injection path via fetched free-form code/text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes a runtime install command that fetches component code from "https://21st.dev/r//" (used in npx shadcn@latest add), which at runtime pulls remote code into the project and can trigger dependency installation, so it is a runtime external dependency that can control what code is injected/installed.