shadcn-ui

SUSPICIOUS. The stub is not overtly malicious, but its primary behavior is to redirect users into installing another skill bundle, creating a transitive trust risk. The inconsistent upstream reference further reduces confidence in install integrity, though there is no direct credential harvesting or exfiltration in this file itself.