extract-design-system

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow takes a user-supplied public website URL, runs the extractor via Playwright, and ingests the fetched page content into .extract-design-system/normalized.json/generated token files, which then become LLM-readable text for the agent to summarize (outsider-authored web content via runtime browsing/scraping).

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The workflow invokes npx to fetch and run remote packages at runtime (notably "npx extract-design-system " and "npx playwright install chromium", which pull code from the public npm registry such as https://registry.npmjs.org/extract-design-system and https://registry.npmjs.org/playwright), so external code is downloaded and executed and the skill depends on those remote packages.