ui-template-apply

SUSPICIOUS. The skill’s purpose is coherent and mostly uses official shadcn infrastructure, but it has a real pre-execution directive that runs an unpinned `@latest` npm CLI at load time, and it encourages installing code from optional third-party registries. This is not confirmed malware, but it is riskier than a normal documentation skill and should be treated as medium risk.