moving-icons

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs fetching/copying component source from the public site movingicons.dev (SKILL.md workflow step 1 and references/quickstart.md’s npx shadcn-svelte add https://movingicons.dev/r/bell.json), so the agent would ingest untrusted third‑party web content that could influence code and actions.