design-md — security audits

Review recommended

Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.

• Gen Agent Trust Hub

  pass

  This skill analyzes design project data from the Stitch platform to generate documentation. It is considered safe for its intended use, with a minor security consideration regarding indirect prompt injection since it processes external HTML code that could contain malicious instructions designed to influence the agent's output.

  Risk: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONFeb 17, 2026Full report

• Socket

  pass

  No alerts

  Mar 18, 2026Full report

• Snyk

  warn

  Risk: MEDIUM · No issues

  Risk: MEDIUMFeb 17, 2026Full report

• Runlayer

  pass

  3 files scanned · No issues

  Risk: NONEFeb 26, 2026Full report

• ZeroLeaks

  pass

  1 finding · Score: 86/100

  Risk: LOWApr 16, 2026Full report