Summary
The official skills/shadcn/SKILL.md allows shadcn@latest and performs a load-time info --json package execution. Because the skill auto-triggers broadly, package code can run before a user explicitly approves package execution, and the executed version can change independently of the reviewed skill.
This is a supply-chain hardening report. It contains no credential values or exploit payloads.
Recommended remediation
- Pin every skill command to an exact, reviewed
shadcn package version.
- Remove load-time package execution from injected project context.
- Run the pinned, read-only
info --json command only after explicit package-execution approval.
- Require separate approval for mutating operations such as
init, add, apply, or overwrite paths.
- Ship future package and skill updates as reviewed, immutable version changes rather than
@latest resolution.
Duplicate check
No matching open security issue or visible draft repository security advisory was found. Open issue #10283 concerns a monorepo argument bug in the load-time info command, not the execution or version-pinning trust boundary.
Summary
The official
skills/shadcn/SKILL.mdallowsshadcn@latestand performs a load-timeinfo --jsonpackage execution. Because the skill auto-triggers broadly, package code can run before a user explicitly approves package execution, and the executed version can change independently of the reviewed skill.This is a supply-chain hardening report. It contains no credential values or exploit payloads.
Recommended remediation
shadcnpackage version.info --jsoncommand only after explicit package-execution approval.init,add,apply, or overwrite paths.@latestresolution.Duplicate check
No matching open security issue or visible draft repository security advisory was found. Open issue #10283 concerns a monorepo argument bug in the load-time
infocommand, not the execution or version-pinning trust boundary.