shadcn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The required runtime workflow only ingests first-party configuration and trusted registry metadata, using the CLI to fetch documentation/examples for specific components selected by the agent/user (e.g., docs <component> then fetch URLs), not arbitrary outsider-authored free text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly instructs the agent/CLI to fetch external docs and registry payloads at runtime (e.g. https://ui.shadcn.com, https://ui.shadcn.com/r/registries.json, https://raw.githubusercontent.com/{owner}/{repo}/{sha}/registry.json, https://raw.githubusercontent.com/.../examples/input-example.tsx, and https://api.npoint.io/abc123), which will be fetched into the agent/context or used to install source files—remote content that can directly influence prompts or introduce/modify code.