21st-dev-components

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow fetches and parses HTML from an OUTSIDER-authored public 21st.dev community component page (via resolve-21st-component.mjs → fetchText(url)), extracting embedded JSON payload text that is then placed into the agent’s LLM context as normalized metadata (e.g., codeUrl, demoCodeUrl, globalCss, demoCodeInline).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's runtime scripts call out to user-supplied 21st.dev component pages (e.g. https://21st.dev/community/components/... ) via scripts/resolve-21st-component.mjs and then fetch raw component source from resolved CDN URLs (e.g. https://cdn.21st.dev/...) during execution, and that fetched metadata/source is required and directly drives which components are selected and integrated by the agent.