homeassistant-dashboard-designer

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub link is a normal public repository (low risk), but the https://www.vcloudinfo.com/click-here URL is an external personal/opaque "click-here" link that may redirect or host unvetted downloads and is therefore suspicious.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). SKILL.md requires validating a user’s natural-language request to draft Lovelace YAML, meaning the agent must ingest outsider-authored free text at runtime via the “Primary Input: Natural Language (Default)” and “Determine intent from the user's request”.