awesome-design-systems

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). Yes — SKILL.md explicitly tells the agent to "start with references/notable-by-category.md, then fetch the system's site directly" and even documents a curl command to pull the upstream README from the public GitHub repo, meaning the skill instructs runtime fetching and ingestion of public third‑party webpages/repos that could influence actions.