web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository at
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.mdto use as reference material for the audit. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest guidelines from a remote source, which are then used as instructional context for reviewing files.
- Ingestion points: Guidelines are fetched from an external URL defined in
SKILL.md. - Boundary markers: The skill does not define specific delimiters for the fetched content.
- Capability inventory: The agent reads local files and writes review findings based on the guidelines.
- Sanitization: No specific sanitization of the remote guideline content is performed before processing.
Audit Metadata