atai-design-system

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime fetching/execution via the CLI and shadcn-svelte registry URLs (https://design-system-labs.archetypeai.workers.dev and https://design-system-console.archetypeai.workers.dev) — e.g., npx shadcn-svelte add /r/.json — and the ds CLI installs CLAUDE.md/ds-manifest.json into projects, so remote content fetched from those URLs at runtime can directly supply agent config or executable component JSON.