shadcn-errors-cli-sync-mismatch

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The skill’s runtime workflow centers on running pnpm dlx shadcn@latest add ... --diff/--overwrite, which fetches registry component source from the public shadcn registry (outsider-authored free text) and injects it into the agent/CLI context to compute diffs and overwrite files.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill repeatedly instructs running the shadcn CLI via "pnpm dlx shadcn@latest", which at runtime fetches and executes remote code from the npm registry (e.g. https://registry.npmjs.org/shadcn) and thus is an external runtime dependency that can control prompts and perform destructive file writes.