building-react-web-application

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill’s add-registry-component flow (scripts/add-registry-component.js and the SKILL.md / references/adding-registry-components.md instructions) invokes npx shadcn@latest view <name-or-url> and will fetch and parse registry JSON from arbitrary shadcn registry URLs or names, then install dependencies and write transformed source/CSS into the project—clearly ingesting untrusted third‑party content that is interpreted and used to drive tool actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The scripts/add-registry-component.js tool invokes external runtime commands (e.g., npx shadcn@latest view <name-or-url>) and accepts registry URLs such as https://ui.shadcn.com/r/styles/new-york/button.json which are fetched at runtime and used to install packages and write/transform files (i.e., execute remote-provided content), creating a clear runtime dependency on external content.