shadcn

High risk. The stated purpose is coherent and the CLI provenance is largely legitimate, but the skill uses load-time pre-execution to run `npx shadcn@latest info --json`, which can fetch and execute remote code before any approval. Community registry support further expands the trust boundary. This is not a benign documentation-only skill footprint.