setup-opendesign
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a
viewer.htmlfile from the author's official GitHub repository (manalkaff/opendesign) to save as the local project index. This represents standard initialization behavior for the vendor's tool. - [INDIRECT_PROMPT_INJECTION]: The skill ingests content from an external source during the setup process.
- Ingestion points: Downloads
viewer.htmlfrom a remote URL defined inSKILL.md. - Boundary markers: None present for the fetched content.
- Capability inventory: The skill performs directory creation and writes files to the local
./opendesign/directory. - Sanitization: The skill writes the response body directly to the filesystem without additional validation or sanitization.
Audit Metadata