iblai-vibe-design

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill explicitly names and falls back to the remote BRAND.md at https://raw.githubusercontent.com/iblai/vibe/refs/heads/main/BRAND.md as the session DESIGN.md (used when no local DESIGN.md is found), meaning the agent can fetch that document at runtime and that fetched content directly controls design instructions/prompts.