web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches fresh design guidelines from Vercel Labs' public repository on GitHub.
- [INDIRECT_PROMPT_INJECTION]: The skill processes guidelines from an external source and reviews local user files, which creates an attack surface for indirect instructions.
- Ingestion points: Remote guideline file (Markdown) and local UI source files.
- Boundary markers: Not specified; content is processed directly to check for compliance.
- Capability inventory: File system read access and network fetch capabilities via WebFetch.
- Sanitization: None; the agent is instructed to apply rules found within the fetched content.
Audit Metadata