ant-design

Pass

Audited by Gen Agent Trust Hub on Oct 18, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill includes instructions to download design configuration files (markdown, JSON, CSS, and ZIP archives) from the domain agent-ds.oday-bakkour.com. It also references an installation command npx skills add System-Desgin/AgentDS for a related master skill. These resources are part of the author's (system-desgin) design system catalog (AgentDS) and are consistent with the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill consumes external data from DESIGN.md and remote URLs to guide the agent's UI generation behavior. This creates a surface where the agent's instructions (the 'Agent Prompt Guide' section) are derived from potentially modifiable files.
  • Ingestion points: Local file DESIGN.md and remote URL https://api.agent-ds.oday-bakkour.com/v1/systems/ant-design/design.md.
  • Boundary markers: No specific boundary markers or delimiters are used to separate these guidelines from the agent's core instructions.
  • Capability inventory: The skill instructs the agent to write files to the project root and follow specific prompt guidelines for code generation.
  • Sanitization: No validation or sanitization of the design guidelines is performed before the agent adopts them.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 18, 2026, 02:22 PM