shadcn-ui

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The README and SKILL.md explicitly state the agent will use shadcn MCP/registry tools (e.g., list_components, get_component, get_block, search_items_in_registries) to retrieve component/block source from registries and public repos, so it will fetch and interpret untrusted third‑party content as part of its workflow.