ts-specialty-ui

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill includes CLI install instructions that fetch and inject remote code at runtime — specifically npx shadcn@latest add "https://reactbits.dev/r/", npx jsrepo add github/sh20raj/react-bits/, and the shadcn registry entry "https://tailark.com/r/{name}", which will cause the toolchain to retrieve and install external component/template code during runtime.