design-md
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions to download
DESIGN.mdfiles from an external repository (github.com/VoltAgent/awesome-design-md) that is not identified as a trusted source. Although the examples fetch markdown files, downloading data from unverified third-party sources is a security concern. - [INDIRECT_PROMPT_INJECTION]: The skill relies on processing
DESIGN.mdfiles provided in the project environment to guide UI generation. This introduces a vulnerability where malicious instructions could be hidden within the design system text. - Ingestion points:
DESIGN.mdfile in the project root. - Boundary markers: None specified in the instructions to protect against malicious instructions inside the design document.
- Capability inventory: Agent-driven code generation of UI components and landing pages.
- Sanitization: None provided; the agent is instructed to directly follow the content of the file.
Audit Metadata