shadcn-core-cli

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.72). The skill’s runtime workflow for add/view/docs/search can fetch registry items or docs from outsider-controlled sources (e.g., add https://... remote URL or registries URLs like https://registry.myorg.com/{name}.json), and the fetched JSON/page text is then ingested into the agent/CLI context to generate diffs or file contents—an indirect prompt-injection surface.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The shadcn CLI fetches registry JSONs at runtime (e.g. https://ui.shadcn.com/r/{name}.json and arbitrary remote URLs like https://example.com/registry-items/datepicker.json) and uses that fetched JSON to generate/write component source into the project, meaning remote content directly controls what code is installed.