Security audit
Security checks for vulnerabilities and agentic risk
This skill provides coherent design guidance, with ordinary web-code precautions to address before publishing generated pages.
Prefer project-level installation. Before publishing generated pages, self-host reviewed assets or pin CDN resources with integrity checks, and consider the visitor requests made by external fonts. Change toast messages to textContent before displaying untrusted text, and translate interface labels for your audience. The scanner's comment, persistence and incomplete-coverage concerns do not establish malicious behavior.
Referenced artifact was not completely inspected
- [Component HTML examples — glass card, docs layout, navbar, toast, accordion, modal, tabs, dropdown](references/EXAMPLES.md)
Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.
style= attributes<!-- ❌ Wrong — static values bypass token system -->
<div style="padding: 16px; background: #fff; border-radius: 8px;">
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
mkdir -p ~/.claude/skills/edic-design-system cp SKILL.md ~/.claude/skills/edic-design-system/
> **验证安装成功**：将以下最小 demo 保存为 `test.html`，用浏览器打开——看到橄榄绿按钮即表示样式加载正常；
The demo loads JavaScript from a mutable GitHub main branch through jsDelivr without Subresource Integrity, so compromised upstream content could execute with the embedding page's privileges. Although this is an installation demo, the README encourages copying its resource links into projects, potentially propagating the supply-chain exposure. Google Fonts and CDN requests also disclose ordinary request metadata to third parties, but their presence alone does not establish malicious tracking or exfiltration.
Skill establishes unauthorized persistence across sessions via cron jobs, startup scripts, or state files. Session persistence allows an attacker to maintain access beyond the current interaction.
mkdir -p ~/.cursor/skills/edic-design-system cp SKILL.md ~/.cursor/skills/edic-design-system/
The instruction mandates the Chinese text “跳到主内容” for the skip link on every page, without user opt-in or an exception for other output languages. CJK-optimized styling does not justify requiring Chinese interface text regardless of the user's locale.
No suspicious patterns detected.