ant-to-shadcn-migration

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs enabling a shadcn "MCP" server that the agent will use at runtime to browse/install components (e.g., registry URL "https://acme.com/r/{name}.json") and to run npx shadcn mcp commands, meaning external manifests/code fetched from that URL can directly influence agent actions or execute installs.