shadcn-ui
Expert guidance for integrating and building applications with shadcn/ui components, including component discovery, installation, customization, and best practices.
Security
2 findings — 2 medium severity. This skill can be installed but you should review these findings before use.
W011: Third-party content exposure detected (indirect prompt injection risk)
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
Third-party content exposure detected (high risk: 0.80). The skill's SKILL.md and README explicitly instruct the agent to use shadcn MCP tools (e.g., get_component, get_block, search_items_in_registries, list_items_in_registries) to retrieve component and block source from registries/Registry Directory—i.e., fetching code and files from third-party registries/public sources that the agent will read and act on during installation/customization—so untrusted external content can influence subsequent actions.
W012: Unverifiable external dependency detected (runtime URL that controls agent)
What this means
The skill fetches instructions or code from an external URL at runtime, and the fetched content directly controls the agent’s prompts or executes code. This dynamic dependency allows the external source to modify the agent’s behavior without any changes to the skill itself.
Why it was flagged
Potentially malicious external URL detected (high risk: 0.90). The skill instructs running the shadcn CLI (e.g., via "npx shadcn@latest add/init/create"), which downloads and executes remote package code (sourced from the shadcn project such as https://github.com/shadcn-ui/ui and https://ui.shadcn.com), so the skill relies on runtime-fetched external code that will be executed on the host.
- Repository
- google-labs-code/stitch-skills
- Commit
ad0b5cc
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.