Webdesign

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). Two GitHub links use the username "anthropics" (not the known official "anthropic") which looks like a possible typo-squatting / unknown repository source on GitHub — a common vector for distributing untrusted code or binaries.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The required runtime workflow for Path 3/verification ingests outsider-authored free text from the open web page(s)/HTML and then drives Interceptor to render and screenshot them, which occurs in Workflows/WebsiteToRedesign.md (capture $URL) and Tools/VerifyDesign.ts (Interceptor opens resolvedUrl and traverses the rendered accessibility tree).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The DriveClaudeDesign tool opens and automates the claude.ai/design web app at runtime (https://claude.ai/design), typing prompts, clicking UI controls, exporting bundles and downloading generated code via the Interceptor CLI, so this external URL is actively used during runtime to drive prompts and trigger remote execution.