ui-designer
Warn
Audited by Snyk on Mar 1, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).
- Third-party content exposure detected (high risk: 0.80). The skill's metadata (references/agents/ui-designer.md) includes WebSearch and WebFetch as tools and the instructions explicitly direct using external component libraries (e.g., "Use Tailwind UI components as base" and "Use existing component libraries as starting points"), which indicates the agent will fetch and interpret open/public web content that could contain untrusted, user-generated instructions.
Audit Metadata