design
Pass
Audited by Gen Agent Trust Hub on Aug 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a component registry index and individual source files from
design.freecodecamp.org. These downloads are part of the intended functionality for integrating the freeCodeCamp UIKit into a project and originate from the author's official design documentation domain. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external metadata (JSON) and component documentation (Markdown) from the design registry. While this introduces an external data surface, the data is sourced from a well-known and official design system repository.
Audit Metadata