launch-shadcn-registry

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required workflow’s Phase 1 preflight runs scripts/validate-registry.sh, which uses curl to fetch outsider-controlled registry.json and optional component JSON from the user-supplied registryBaseUrl/componentUrlPattern, then parses the fetched content as JSON (readable text) and uses it to drive subsequent artifact generation.