cavekit-design-system

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.80). The Import Workflow explicitly tells agents to "Fetch the raw DESIGN.md from the collection" hosted at https://github.com/VoltAgent/awesome-design-md and then present/use that fetched DESIGN.md as a starting point that agents must read and apply when generating UI, so this external GitHub URL is fetched at runtime and its content directly controls agent prompts/instructions.