use-design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The agent fetches design markdown files and token data from a public design catalog (getdesign.kr and GitHub) specified by name or URL without unrestricted outsider text input sources.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill instructs the agent to fetch design systems, indexes, and tokens at runtime via curl from getdesign.kr and GitHub (CaesiumY/ko-design-md), which constitutes a common unofficial operational dependency.