web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches configuration and design guidelines from Vercel Labs' official GitHub repository.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted code files for review, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: The skill reads local files or patterns provided by the user as described in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified in the processing logic.
- Capability inventory: The skill performs local file reads and network fetches using WebFetch.
- Sanitization: No content validation or sanitization of the ingested code is performed before the audit process.
Audit Metadata