tiptap

SUSPICIOUS. Most of the skill is a normal framework guide using official Tiptap and Tailwind packages, with no clear credential theft or malicious data routing. The main issue is the recommended shadcn install path pulling code/config from an unrelated third-party raw GitHub registry while the skill presents it as the recommended setup; this is disproportionate supply-chain risk and an internal consistency concern, but not confirmed malware.

No direct evidence of malicious payloads appears in the script itself; it is a straightforward installer. However, it performs high-risk supply-chain operations: executes a floating-version CLI via `npx shadcn@latest`, consumes a mutable remote registry JSON via a GitHub raw URL, and installs multiple unpinned npm dependencies. This combination can enable upstream tampering or unintended dependency changes to propagate into the installing environment. Pinning versions/commits and using integrity-checked, deterministic installs (lockfiles, checksums, and controlled npm/npx behavior) is strongly recommended.