skills/openaec-foundation/shadcn-ui-claude-skill-package/shadcn-errors-tailwind-v3-v4-migration/Snyk
shadcn-errors-tailwind-v3-v4-migration
Warn
Audited by Snyk on Jun 28, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.90). The runbook explicitly instructs running remote-install/execute commands (e.g., "npx @tailwindcss/upgrade") which will fetch and run code from npm (see https://www.npmjs.com/package/@tailwindcss/upgrade) and also directs installing/executing packages like tw-animate-css and tooling from npm (https://www.npmjs.com/package/tw-animate-css, https://www.npmjs.com/package/@tailwindcss/postcss, https://www.npmjs.com/package/@tailwindcss/vite), so the skill depends on external packages that are fetched and executed at runtime.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata