shadcn-official

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). SKILL.md describes a workflow that reads only first-party project files (components.json and local installed components in src/components/ui/) and optionally uses shadcn MCP to browse/install shadcn registry content; it does not indicate ingestion of arbitrary outsider-authored free text without first selecting specific registry/docs items.