design-md

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.90). The skill explicitly tells agents to ingest DESIGN.md files from public sources (e.g., the awesome-design-md GitHub collection via raw.githubusercontent.com and by scraping target websites) and to read those files to guide UI generation, so untrusted third-party content could directly influence the agent's actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill's Example 1 shows a runtime fetch via "curl -O https://raw.githubusercontent.com/VoltAgent/awesome-design-md/main/design-md/linear/DESIGN.md", and that downloaded DESIGN.md is read by agents to directly control generation prompts and is treated as a required dependency.