setup-opendesign

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches a viewer.html file from the author's official GitHub repository (manalkaff/opendesign) to save as the local project index. This represents standard initialization behavior for the vendor's tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests content from an external source during the setup process.
  • Ingestion points: Downloads viewer.html from a remote URL defined in SKILL.md.
  • Boundary markers: None present for the fetched content.
  • Capability inventory: The skill performs directory creation and writes files to the local ./opendesign/ directory.
  • Sanitization: The skill writes the response body directly to the filesystem without additional validation or sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 07:07 PM