OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn4 providerslatest audit Mar 18, 2026
Independent checks from skills.sh's audit partners.
The skill is designed to create and apply visual design systems by extracting information from external sources like websites, videos, and PDFs. While it does not contain malicious code, it possesses an attack surface for indirect prompt injection. Malicious instructions embedded in the design assets being analyzed could be inadvertently incorporated into the final design prompts used by AI tools like HeyGen or Figma.
Detected behaviors
No alerts
2 issues
1/16 files flagged