web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Mar 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a guidelines document from a public GitHub repository. This is an expected operation for the skill to obtain the latest design rules from the publisher.\n- [PROMPT_INJECTION]: The skill dynamically incorporates instructions from an external markdown file. This creates an indirect instruction surface; however, the source is an official project repository and the skill's capabilities are restricted to reading UI files and outputting design audits.\n
- Ingestion points: Fetched from raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md via WebFetch tool.\n
- Boundary markers: None present in the instructions.\n
- Capability inventory: File system read access and output generation.\n
- Sanitization: Not explicitly performed on the external content.
Audit Metadata