web-to-design-md

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). This points to an unknown GitHub repository (noted in the SKILL.md as having no open license) that the instructions fetch via npx — executing code directly from an untrusted GitHub user can be used to distribute malware.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). SKILL.md describes a runtime workflow that takes a user-supplied URL and “scrapes the site’s colors / fonts / CSS / motion,” which would ingest outsider-authored free text (web page/CSS content) into the agent/LLM context via the scraping step.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs a one-time network install that fetches and installs remote code which will execute as a required skill dependency (npx skills add https://github.com/Paidax01/web-to-design-md), so the GitHub URL directly controls runtime behavior.