DESIGN.md UI Designer

• Outcome: Pass
• Latest audit: Jun 10, 2026 at 2:46 PM UTC
• Version:
  1.0.1

Overview

The skill appears to be a broad design-workflow helper, and the available evidence does not show hidden, destructive, or data-stealing behavior.

Before installing, understand that this skill may activate for general design-related requests because its scope is broad. Use it when you want design or UI help, and review generated files before applying them to an existing project.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (1)

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The description says to use the skill for a very wide range of tasks and to trigger on generic phrases such as "landing page," "visual redesign," and "design tokens." Those phrases overlap with common UI discussions and the file does not provide exclusion conditions or negative examples, increasing the risk of unintended invocation.

VirusTotal

64/64 vendors flagged this skill as clean.