sync-shadcn

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). At runtime, the workflow fetches/reads the upstream shadcn repo (../shadcn/apps/v4) via git diff/log/ls-files and uses those diffs/logs to build the plan/inventory that is then fed into the agent’s LLM context; this is outsider-authored free text from a public repo.