shadcn

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Several listed URLs point to arbitrary/third‑party registry endpoints and a public JSON host (api.npoint.io) that the CLI can fetch and install from — allowing unvetted, user-controlled content to be injected into a project (supply‑chain risk).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The skill explicitly instructs agents to fetch component docs, examples, registries, and arbitrary URLs at runtime (e.g. https://ui.shadcn.com/docs/components/radix/button, https://raw.githubusercontent.com/.../examples/button-example.tsx, and https://api.npoint.io/abc123), so remote content can directly drive the agent's prompts and the code/files installed into the project.