shadcn-core-registry

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow for this skill involves the shadcn CLI fetching registry item JSON from URLs specified in components.json#registries (public or third-party registries), and then inlining the returned files[].content (free-form text) into the agent/CLI’s LLM context for subsequent processing—i.e., outsider-authored registry content is ingested via the HTTP fetch + JSON validation path.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly describes runtime HTTP fetches of registry item JSON (e.g., the default registry URL template https://ui.shadcn.com/r/{name}.json and custom templates like https://registry.acme.com/{name}.json) and those per-item JSON responses contain "content" fields with source code that the CLI writes into the consumer project at runtime, which is remote code fetched and injected during execution.