awesome-design

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The workflow reads README.md and DESIGN.md files from a cloned GitHub repository (voltagent/awesome-design-md), which is a public community repository where outsiders can contribute pull requests and issues, exposing the agent to untrusted external text.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (medium risk: 0.30). The skill requires cloning an external GitHub repository (https://github.com/voltagent/awesome-design-md) during setup to obtain the design-token instruction files that govern agent behavior, falling under common/reputable unofficial publisher provenance.