Awesome Design Of Great Product Company

• Outcome: Pass
• Latest audit: Sep 16, 2026 · 9:56 AM UTC
• Version: 1.0.0

Overview

This skill is a static design-guideline reference with no confirmed hidden instructions, executable payloads, persistence, or data exfiltration behavior.

Reasonable to install if you want a static library of brand-style design references. Use a pinned installer/source revision or sandboxed environment for installation, and remember the brand design docs are unofficial approximations rather than authoritative design systems.

A.I.G

Vulnerability Patterns

• Insecure Dependencies: Introduces malicious components through unsafe dependency sources
• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally

Findings (1)

T08 · Insecure Dependencies

Warning

• Location: README.md:17

Finding

Unpinned Third-Party Installer Execution Through npx

Content

View full analysis

Remediation

View remediation

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (459)

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/clickhouse/preview-dark.html (reported line 466)May include surrounding context.

html

<button class="btn-ghost">View Source</button>
  </div>

  <!-- Performance Stats Bar (ClickHouse distinctive) -->
  <div class="stats-bar">
    <div class="stat-item">
      <div class="stat-number">1000<span class="accent">x</span></div>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/composio/preview-dark.html (reported line 425)May include surrounding context.

html

</head>
<body>

<!-- DARK MODE BADGE -->
<div class="dark-badge">Dark Mode</div>

<!-- NAV -->

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/hashicorp/preview-dark.html (reported line 700)May include surrounding context.

html

</head>
<body>

<!-- DARK MODE BADGE -->
<div class="dark-badge">Dark Mode</div>

<!-- NAV -->

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/sanity/preview-dark.html (reported line 518)May include surrounding context.

html

</head>
<body>

<!-- DARK MODE BADGE -->
<div class="dark-badge">Dark Mode</div>

<!-- NAV -->

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/supabase/preview-dark.html (reported line 468)May include surrounding context.

html

</head>
<body>

<!-- DARK MODE BADGE -->
<div class="dark-badge">Dark Mode</div>

<!-- NAV -->

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/composio/preview-dark.html (reported line 771)May include surrounding context.

html

<hr class="section-divider">

<!-- FORMS -->
<section class="section" id="forms">
  <div class="section-title">05 / Form Elements</div>
  <h2 class="section-heading">Inputs & Forms</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/composio/preview.html (reported line 746)May include surrounding context.

html

<hr class="section-divider">

<!-- FORMS -->
<section class="section" id="forms">
  <div class="section-title">05 / Form Elements</div>
  <h2 class="section-heading">Inputs & Forms</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/ferrari/preview-dark.html (reported line 859)May include surrounding context.

html

<hr class="section-divider">

<!-- 2. TYPOGRAPHY -->
<div id="typography" class="section">
  <h2 class="section-title">Typography Scale</h2>
  <p class="section-desc">FerrariSans for headings and editorial content, Body-Font for labels and captions. Rendered with DM Sans and Barlow Condensed as Google Font substitutes.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/ferrari/preview.html (reported line 819)May include surrounding context.

html

<hr class="section-divider">

<!-- 2. TYPOGRAPHY -->
<div id="typography" class="section">
  <h2 class="section-title">Typography Scale</h2>
  <p class="section-desc">FerrariSans for headings and editorial content, Body-Font for labels and captions. Rendered with DM Sans and Barlow Condensed as Google Font substitutes.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/figma/preview-dark.html (reported line 534)May include surrounding context.

html

<hr class="section-divider">

<!-- COLORS -->
<section class="section" id="colors">
  <div class="section-title">01 / COLOR PALETTE</div>
  <h2 class="section-heading">Color Palette & Roles</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/figma/preview.html (reported line 539)May include surrounding context.

html

<hr class="section-divider">

<!-- COLORS -->
<section class="section" id="colors">
  <div class="section-title">01 / COLOR PALETTE</div>
  <h2 class="section-heading">Color Palette & Roles</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/figma/preview-dark.html (reported line 689)May include surrounding context.

html

<hr class="section-divider">

<!-- BUTTONS -->
<section class="section" id="buttons">
  <div class="section-title">03 / BUTTON VARIANTS</div>
  <h2 class="section-heading">Buttons</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/figma/preview.html (reported line 697)May include surrounding context.

html

<hr class="section-divider">

<!-- BUTTONS -->
<section class="section" id="buttons">
  <div class="section-title">03 / BUTTON VARIANTS</div>
  <h2 class="section-heading">Buttons</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/figma/preview-dark.html (reported line 757)May include surrounding context.

html

<hr class="section-divider">

<!-- SPACING -->
<section class="section" id="spacing">
  <div class="section-title">05 / SPACING SCALE</div>
  <h2 class="section-heading">Spacing System</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/figma/preview.html (reported line 767)May include surrounding context.

html

<hr class="section-divider">

<!-- SPACING -->
<section class="section" id="spacing">
  <div class="section-title">05 / SPACING SCALE</div>
  <h2 class="section-heading">Spacing System</h2>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview-dark.html (reported line 509)May include surrounding context.

html

</head>
<body>

<!-- DARK MODE BADGE -->
<div class="dark-badge">Dark Mode</div>

<!-- NAV -->

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview.html (reported line 493)May include surrounding context.

html

</head>
<body>

<!-- NAV -->
<nav class="nav">
  <span class="nav-brand">awesome-design-md</span>
  <ul class="nav-links">

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/sentry/preview.html (reported line 529)May include surrounding context.

html

</head>
<body>

<!-- NAV -->
<nav class="nav">
  <span class="nav-brand">awesome-design-md</span>
  <ul class="nav-links">

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview-dark.html (reported line 538)May include surrounding context.

html

<hr class="section-divider">

<!-- 1. COLOR PALETTE -->
<section class="section" id="colors">
  <h2 class="section-title">Color Palette</h2>
  <p class="section-desc">Every color from Framer's dark-first identity — pure black void, electric blue accent, and frosted white surfaces.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview.html (reported line 519)May include surrounding context.

html

<hr class="section-divider">

<!-- 1. COLOR PALETTE -->
<section class="section" id="colors">
  <h2 class="section-title">Color Palette</h2>
  <p class="section-desc">Every color from Framer's dark-first identity — pure black void, electric blue accent, and frosted white surfaces.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview-dark.html (reported line 747)May include surrounding context.

html

<hr class="section-divider">

<!-- 4. CARDS -->
<section class="section" id="cards">
  <h2 class="section-title">Card Examples</h2>
  <p class="section-desc">Dark surface cards with Framer Blue ring borders and multi-layer floating shadows.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview.html (reported line 728)May include surrounding context.

html

<hr class="section-divider">

<!-- 4. CARDS -->
<section class="section" id="cards">
  <h2 class="section-title">Card Examples</h2>
  <p class="section-desc">Dark surface cards with Framer Blue ring borders and multi-layer floating shadows.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview-dark.html (reported line 873)May include surrounding context.

html

<hr class="section-divider">

<!-- 8. ELEVATION -->
<section class="section" id="elevation">
  <h2 class="section-title">Elevation & Depth</h2>
  <p class="section-desc">Inverted elevation system — blue ring shadows for containment, white edge highlights for floating elements.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/framer/preview.html (reported line 854)May include surrounding context.

html

<hr class="section-divider">

<!-- 8. ELEVATION -->
<section class="section" id="elevation">
  <h2 class="section-title">Elevation & Depth</h2>
  <p class="section-desc">Inverted elevation system — blue ring shadows for containment, white edge highlights for floating elements.</p>

Hidden Instructions

High

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Hidden instructions were detected in comments or invisible text. These could contain malicious directives. Manual review is recommended.

Content

Scanner excerpt · docs/hashicorp/preview-dark.html (reported line 728)May include surrounding context.

html

</div>
</section>

<!-- 1. COLOR PALETTE -->
<section class="section" id="colors">
  <div class="section-label">Section 1</div>
  <h2 class="section-title">Color Palette</h2>

Static analysis

No suspicious patterns detected.