codedvisuals

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill references codedvisuals.com/r/{name}.json as an operational package registry URL for the shadcn CLI, but the URL is third-party/unknown commercial provenance without independent authentication or proof of official publisher ownership, resulting in a high tier.