open-design-landing
What this skill does
This skill is a design tool for generating editorial landing pages using a specific visual language. It reads input data, optionally generates images, and composes a self-contained HTML file.
github/nexu-io - Data Exfiltration - 84.9k stars
Threat analysis
Skill info
pkg:github/nexu-io/open-design@bf71452?skill=open-design-landingAssessments (1)
Data Exfiltration
Data Exfiltration via local-llm-review
scripts/imagegen.ts
The script requires `FAL_KEY` in the environment and sends image generation prompts to the `fal.ai` backend. If the `FAL_KEY` is misconfigured or exposed, it could lead to unauthorized access or data Badge
Add the Anomity scan badge for open-design-landing to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of open-design-landing? Report an issue or request a rescan.
