shadcn-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's documentation and workflow (SKILL.md and official-ui-reference.md) explicitly instruct using the shadcn CLI and copying/adding components from public registries and sites (e.g., "npx shadcn@latest add", "copy component code from ui.shadcn.com", and remote registry URLs like https://ui.shadcn.com or other https://.../r/{name}.json), which fetches and installs arbitrary third‑party registry/component files that the agent would consume and act on.