nby-awesome-design-md
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Clones a repository from 'https://github.com/VoltAgent/awesome-design-md.git' to retrieve design system templates.
- [COMMAND_EXECUTION]: Executes shell commands including 'git clone', 'git pull', 'mkdir', 'ls', and 'cp' to manage its local cache and copy files into the user's project directory.
- [PROMPT_INJECTION]: Vulnerable to indirect prompt injection. The skill instructs the agent to read and strictly follow instructions from an external Markdown file (DESIGN.md) sourced from a third-party repository.
- Ingestion points: DESIGN.md file in the project root, downloaded from the external 'VoltAgent/awesome-design-md' repository.
- Boundary markers: Absent; the skill explicitly directs the agent to 'use it as the single source of truth' for all generation decisions.
- Capability inventory: The agent has shell execution capabilities (git, cp, ls, mkdir) which could be targeted by instructions embedded in the external content.
- Sanitization: None; external content is consumed without validation or filtering.
Audit Metadata