designprompt
Warn
Audited by Snyk on Feb 16, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.90). The skill explicitly instructs automated scraping and manual copying of design system prompts from the public site https://www.designprompts.dev (see scripts/README and EXTEND.md) and then loads those third‑party prompt texts from the styles/ directory for runtime use, so the agent will ingest and act on untrusted external content.
Audit Metadata