ant-design
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download design configuration files (markdown, JSON, CSS, and ZIP archives) from the domain
agent-ds.oday-bakkour.com. It also references an installation commandnpx skills add System-Desgin/AgentDSfor a related master skill. These resources are part of the author's (system-desgin) design system catalog (AgentDS) and are consistent with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill consumes external data from
DESIGN.mdand remote URLs to guide the agent's UI generation behavior. This creates a surface where the agent's instructions (the 'Agent Prompt Guide' section) are derived from potentially modifiable files. - Ingestion points: Local file
DESIGN.mdand remote URLhttps://api.agent-ds.oday-bakkour.com/v1/systems/ant-design/design.md. - Boundary markers: No specific boundary markers or delimiters are used to separate these guidelines from the agent's core instructions.
- Capability inventory: The skill instructs the agent to write files to the project root and follow specific prompt guidelines for code generation.
- Sanitization: No validation or sanitization of the design guidelines is performed before the agent adopts them.
Audit Metadata