design-ui
Warn
Audited by Snyk on Feb 26, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 1.00). The references/agent-quality-gates.md explicitly defines a "design-researcher" whose purpose is to "Gather design context through web research, sector analysis, and competitor study" and requires evaluating external sources (e.g., "Are sources from recognized design publications..."), which shows the agent will fetch and interpret untrusted public web content that can materially influence subsequent tool use and decisions.
Audit Metadata