The Agent Skills Directory

[UNVERIFIABLE_DEPENDENCIES]: The skill utilizes the official shadcn CLI (npx shadcn@latest) to download and integrate component source code. These resources are retrieved from the well-known shadcn registry, which is standard practice for this library.
[COMMAND_EXECUTION]: A utility script scripts/verify-setup.sh is provided to perform local environment checks. It uses common shell utilities like grep and find to validate project structure and configuration without performing unsafe operations.
[INDIRECT_PROMPT_INJECTION]: The skill interfaces with external component registries using MCP tools such as list_components and search_items_in_registries. This introduces a surface where external component metadata is ingested into the agent context, though the risk is mitigated by the skill's focus on trusted and well-known registries.
[EXTERNAL_DOWNLOADS]: The documentation recommends the installation of several well-known and widely used packages including next-themes, react-hook-form, zod, and @tanstack/react-table. These dependencies are standard in the React ecosystem.

shadcn-ui