web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines and formatting instructions from Vercel Labs' official GitHub repository. This behavior targets a trusted organization and is consistent with the skill's primary purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources and user-provided files, creating a vulnerability surface for indirect prompt injection.
- Ingestion points: Remote instructions fetched from a URL in
SKILL.mdand user-specified files or patterns. - Boundary markers: Absent; the skill does not explicitly use delimiters or warnings to isolate external content.
- Capability inventory: Network access via
WebFetchand local file reading capabilities. - Sanitization: Absent; the skill provides the fetched content directly to the agent for rule application.
Audit Metadata