kmp-shadcn-compose

The code is a local source-file scaffolding utility with no evident malware or unauthorized network/system activity. It has a moderate file-integrity risk because the unvalidated --name argument is used in write paths and generated source, allowing path traversal or unintended overwrites when invoked with malicious input. The provided fragment also contains clear implementation errors that likely prevent successful execution.