bold-ui

Security checks across malware telemetry and agentic risk

Overview

This design helper is mostly coherent, but it can import user-supplied GitHub templates into persistent local agent state and fetch remote SVG icons, so it should be reviewed before installation.

Install only if you are comfortable with a design skill that can contact third-party services and persist imported templates for future use. Use add-temp only with repositories you trust, review imported manifest and description files before installation, and prefer local icon fallbacks in restricted or sensitive environments.

SkillSpector

By NVIDIA

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
MCP Tool PoisoningHidden Instructions, Unicode Deception, Parameter Description Injection
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands

Findings (14)

Description-Behavior Mismatch

Medium

Confidence: 91% confidence
Finding: The skill is presented as a UI beautification/template application tool, but it also includes instructions to import arbitrary templates from GitHub and mutate persistent template registries. This expands the skill from local design assistance into remote content ingestion and system state modification, increasing supply-chain and persistence risk beyond what a user would reasonably infer from the manifest.

Context-Inappropriate Capability

High

Confidence: 96% confidence
Finding: The skill contains shell-oriented instructions to clone remote repositories, copy files into user directories, and remove temporary directories. For a design skill, these actions are high risk because they enable remote content intake, local persistence, and destructive file operations that could be misapplied or abused if paths or inputs are mishandled.

Context-Inappropriate Capability

Medium

Confidence: 88% confidence
Finding: The skill instructs the agent to fetch icons from Iconify over the network, which is an external data transmission not clearly disclosed in the core skill scope. Even if limited to icon retrieval, it introduces privacy, dependency, and integrity risks because project context or usage patterns may indirectly be exposed to a third-party service.

Description-Behavior Mismatch

Medium

Confidence: 90% confidence
Finding: The adapter documentation expands from local Tailwind theming into instructing network access to a third-party icon API. In an agent skill, this is security-relevant because it can cause unsolicited outbound requests, leak project usage metadata, and introduce unreviewed remote content into generated code even though the stated purpose is local UI/theme generation.

Context-Inappropriate Capability

Medium

Confidence: 89% confidence
Finding: Including icon-download capability is outside the minimum scope needed for Tailwind configuration and component generation. That scope creep increases attack surface by enabling network activity and ingestion of third-party SVG content, which may later be inlined or trusted without adequate validation.

Vague Triggers

Medium

Confidence: 84% confidence
Finding: The activation criteria are broad enough to trigger on common design-related requests, which increases the chance the skill runs in ordinary conversations without the user understanding its side effects. In this skill, that matters because later instructions include network access and filesystem modifications, making overbroad activation more dangerous than a purely advisory skill.

Missing User Warnings

Medium

Confidence: 95% confidence
Finding: The skill describes cloning GitHub repositories, copying files into persistent directories, and updating registries without a prominent safety warning or consent checkpoint. Users may not realize a design assistance skill can modify the local system, creating a transparency and authorization problem around persistent changes.

Missing User Warnings

Low

Confidence: 84% confidence
Finding: The adapter instructs users to fetch icons from a third-party service without clearly warning that this causes outbound network access and shares request metadata with an external provider. In an agent or enterprise environment, silent external fetch guidance can violate privacy, egress-control, or offline-build requirements even if the transmitted data is limited.

External Transmission

Medium

Category: Data Exfiltration
Content: | Template source | Iconify prefix | Example URL | |----------------|---------------|-------------| | lucide | `lucide` | `https://api.iconify.design/lucide/search.svg` | | phosphor | `ph` | `https://api.iconify.design/ph/magnifying-glass.svg` | | heroicons | `heroicons-outline` / `heroicons-solid` | `https://api.iconify.design/heroicons-outline/search.svg` | | feather | `feather` | `https://api.iconify.design/feather/search.svg` |
Confidence: 86% confidence
Finding: https://api.iconify.design/

External Transmission

Medium

Category: Data Exfiltration
Content: | Template source | Iconify prefix | Example URL | |----------------|---------------|-------------| | lucide | `lucide` | `https://api.iconify.design/lucide/search.svg` | | phosphor | `ph` | `https://api.iconify.design/ph/magnifying-glass.svg` | | heroicons | `heroicons-outline` / `heroicons-solid` | `https://api.iconify.design/heroicons-outline/search.svg` | | feather | `feather` | `https://api.iconify.design/feather/search.svg` | | tabler | `tabler` | `https://api.iconify.design/tabler/search.svg` |
Confidence: 86% confidence
Finding: https://api.iconify.design/

External Transmission

Medium

Category: Data Exfiltration
Content: |----------------|---------------|-------------| | lucide | `lucide` | `https://api.iconify.design/lucide/search.svg` | | phosphor | `ph` | `https://api.iconify.design/ph/magnifying-glass.svg` | | heroicons | `heroicons-outline` / `heroicons-solid` | `https://api.iconify.design/heroicons-outline/search.svg` | | feather | `feather` | `https://api.iconify.design/feather/search.svg` | | tabler | `tabler` | `https://api.iconify.design/tabler/search.svg` |
Confidence: 86% confidence
Finding: https://api.iconify.design/

External Transmission

Medium

Category: Data Exfiltration
Content: | lucide | `lucide` | `https://api.iconify.design/lucide/search.svg` | | phosphor | `ph` | `https://api.iconify.design/ph/magnifying-glass.svg` | | heroicons | `heroicons-outline` / `heroicons-solid` | `https://api.iconify.design/heroicons-outline/search.svg` | | feather | `feather` | `https://api.iconify.design/feather/search.svg` | | tabler | `tabler` | `https://api.iconify.design/tabler/search.svg` | ```
Confidence: 86% confidence
Finding: https://api.iconify.design/

External Transmission

Medium

Category: Data Exfiltration
Content: | phosphor | `ph` | `https://api.iconify.design/ph/magnifying-glass.svg` | | heroicons | `heroicons-outline` / `heroicons-solid` | `https://api.iconify.design/heroicons-outline/search.svg` | | feather | `feather` | `https://api.iconify.design/feather/search.svg` | | tabler | `tabler` | `https://api.iconify.design/tabler/search.svg` | ``` # Fetch icon SVG from Iconify (returns raw SVG, ready to inline)
Confidence: 87% confidence
Finding: https://api.iconify.design/

External Transmission

Medium

Category: Data Exfiltration
Content: ``` # Fetch icon SVG from Iconify (returns raw SVG, ready to inline) curl -s "https://api.iconify.design/lucide/search.svg?height=24" ``` Style the SVG icon with Tailwind utility classes:
Confidence: 92% confidence
Finding: https://api.iconify.design/

VirusTotal

60/60 vendors flagged this skill as clean.

View on VirusTotal