awesome-design-md
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to browse and extract content from an external repository (VoltAgent/awesome-design-md). This creates a surface where instructions embedded in the external markdown files could potentially influence the agent's behavior.
- Ingestion points: The agent is directed to fetch and read markdown files from
https://github.com/VoltAgent/awesome-design-md/tree/main/design-mdin SKILL.md. - Boundary markers: The instructions do not specify any delimiters or safety warnings to ensure the agent ignores instructions that may be contained within the fetched design references.
- Capability inventory: The skill allows the agent to read external web content and write or update the local project's
DESIGN.mdfile, as noted in the procedure in SKILL.md. - Sanitization: There is no evidence of sanitization or validation logic to filter out potentially malicious content from the external sources before processing.
Audit Metadata