design-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's Registry Selection Guide (references/registry-guide.md) explicitly instructs browsing and checking third-party sites (e.g., https://ui.shadcn.com/registry and https://ui.shadcn.com/themes) and installing community registries, meaning the agent workflow expects to read and act on untrusted public registry pages that could influence generation/installation decisions.