migrate-radix-to-base

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider free text can enter the LLM context via the runtime step that fetches shadcn registry “golden pair” wrapper JSON from public URLs (e.g., https://ui.shadcn.com/r/styles/<style>/<component>.json), whose files[0].content is ingested as readable text for transformation/merging.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly fetches golden/component JSON at runtime from https://ui.shadcn.com/r/styles//.json (and the base variant URL https://ui.shadcn.com/r/styles/base-/.json), and those remote JSON blobs are used to drive diffs and the migration logic (i.e., they directly control the agent's transformation instructions and are required for the workflow).