beehiiv-ui-skills
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation references a third-party GitHub repository (
github.com/VoltAgent/awesome-design-md) as a source for supplemental design guidelines (DESIGN.md). This repository is not managed by a known trusted organization or the skill author. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from an external markdown file to dynamically extract visual tokens, creating a vulnerability surface for instructions embedded in external data.
- Ingestion points: External file reference in
SKILL.mdtoVoltAgent/awesome-design-md. - Boundary markers (absent): No delimiters or instructions are provided to the agent to disregard potential commands found within the external
DESIGN.mdfile. - Capability inventory: UI code generation (HTML/CSS) based on design tokens.
- Sanitization (absent): The skill does not describe any validation or filtering mechanisms for the external design content.
Audit Metadata