Vibe UI

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 8:57 AM UTC
• Version: 1.1.0

Overview

This is a local UI design helper with disclosed project-file writes; the main caution is an optional URL extractor that can fetch arbitrary URLs.

Install only if you want a local-first UI design workflow that writes DESIGN.md and .vibe-ui files into your project. Avoid running extract-url on untrusted, internal, localhost, metadata-service, or redirected URLs, and review any optional npx lint command before allowing package execution.

A.I.G

Vulnerability Patterns

• Insecure Skill Coding Practices: Finds exploitable flaws such as hardcoded secrets or command injection
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T09 · Insecure Skill Coding Practices

Warning

• Location: scripts/design.mjs:1864

Finding

Unrestricted URL Fetch Enables Server-Side Request Forgery

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep
• Memory Poisoning: Persistent Context Injection, Context Window Stuffing, Memory Manipulation
• YARA Signatures: Malware Match, Webshell Match, Cryptominer Match
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (63)

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 21)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 22)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 23)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 24)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 25)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 26)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 27)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 28)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 29)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 30)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 31)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 32)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 33)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 34)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 35)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 36)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 37)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 38)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 39)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 40)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Ae1

High

• Category: analysis-evasion
• Confidence: 100% confidence

Finding

Referenced artifact was not completely inspected

Content

Scanner excerpt · SKILL.md (reported line 41)May include surrounding context.

md

node scripts/design.mjs list [--source built-in|open-design|all]

Memory Manipulation

High

• Category: Memory Poisoning
• Confidence: 80% confidence

Finding

Skill manipulates agent memory, state, or stored context. Memory corruption can alter personality, override safety rules, or cause unpredictable behavior.

Content

Scanner excerpt · registry.json (reported line 818)May include surrounding context.

json

"name": "Doubao-inspired AI product",
      "sourceId": "claude",
      "region": "china",
      "description": "Chinese AI assistant product style with warm approachable surfaces, clear conversation/product explanation space, and friendly action hierarchy.",
      "categories": [
        "china",
        "ai",

Natural-Language Policy Violations

High

• Category: Not specified by scanner
• Confidence: 98% confidence

Finding

The instruction "Don't reduce the negative letter-spacing on display sizes 'for accessibility'" directly rejects accessibility-driven adaptation in natural language. This creates a policy concern because it discourages accommodating user readability needs in favor of brand consistency.

Content

No source excerpt is available for this finding.

YARA rule 'agent_skill_mcp_tool_poisoning_metadata': MCP/tool metadata poisoning indicators in tool schemas or skill manifests [agent_skills]

High

• Category: YARA Match
• Confidence: 80% confidence

Finding

YARA rule matched a hack tool or exploit indicator (offensive tools, reconnaissance, privilege escalation, or exploit frameworks).

Content

Scanner excerpt · resource/open-design-template-index.json (reported line 17)May include surrounding context.

json

e": {
    "repo": "nexu-io/open-design",
    "url": "https://github.com/nexu-io/open-design",
    "branch": "main",
    "commit": "18169ee52ac6f24eef277dba345a9f3a0e4e1b36",
    "designTemplatesPath": "design-templates",
    "license": "Apache-2.0"
  },
  "templates": [
    {
      "id": "audio-jingle",
      "namespacedId": "open-design-template:audio-jingle",
      "name": "audio-jingle",
      "description": "Audio generation skill — jingles, beds, voiceover, and sound effects. Routes music requests to Suno V5 / Udio / Lyria, speech to MiniMax TTS / FishAudio / ElevenLabs V3, and SFX to ElevenLabs SFX or AudioCraft. Output is one MP3/WAV file saved to the project folder.",
      "sourcePath": "design-templates/audio-jingle",
      "source": "open-design",
      "repo": "nexu-io/open-design",
      "commit": "18169ee52ac6f24eef277dba345a9f3a0e4e1b36",
      "kind": "document",
      "pageType": "docs",
      "tags": [
        "voice",
        "sfx",
        "audio",
        "speech

Context-Inappropriate Capability

High

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The presence of templates for harvesting, summarizing, or rendering live data from external services and social platforms creates a capability mismatch with the declared UI-style purpose. If invoked through broad matching, the agent could access or process authenticated or live external data under the guise of a design skill, increasing the risk of overreach and data exposure.

Content

No source excerpt is available for this finding.