use-design-md
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process external design specifications (
DESIGN.md) from a remote catalog and repository. These files contain natural language instructions that the agent is explicitly directed to follow as "hard constraints" during its UI construction process. - Ingestion points: Fetches an index file (
llms.txt) and specific design entries (<slug>.md) fromhttps://www.getdesign.krandhttps://raw.githubusercontent.com/CaesiumY/ko-design-md/. - Boundary markers: The instructions lack explicit delimiters or "ignore embedded instructions" warnings for the fetched content, increasing the risk of the agent obeying instructions embedded within the design files.
- Capability inventory: The skill uses
curlfor network and file operations and has the capability to write and modify the current project's codebase. - Sanitization: No validation or sanitization is performed on the fetched markdown data before it is interpreted by the agent.
- [EXTERNAL_DOWNLOADS]: The skill retrieves design metadata, JSON tokens, and documentation from external sources.
- Evidence: Uses
curlto fetch content fromhttps://www.getdesign.krandhttps://raw.githubusercontent.com/CaesiumY/ko-design-md/. - Note: These resources trace back to the vendor/author's infrastructure (
caesiumy) and are necessary for the skill's primary function. - [COMMAND_EXECUTION]: The skill provides exact shell command templates for the agent to execute for data retrieval and file management.
- Evidence: The agent is instructed to use
curl -fsSL --create-dirs -o ...with shell variables like$XDG_CACHE_HOMEand to verify file sizes usingwc -lc.
Audit Metadata