chat-ui

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs running npx shadcn@latest add https://ui.inference.sh/r/chat.json, which fetches and installs component code from inference.sh's own registry—an inbound operational dependency, but inference.sh is a specific unverified project/vendor rather than a clearly established enterprise, so it is common/reputable unofficial rather than strong.