web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository.
- The resource is located at
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md. - This content is retrieved as reference data for the UI code review process.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data, which constitutes a standard attack surface for indirect instructions.
- Ingestion points: Processes guidelines from a remote URL and reads local files provided by the user in
SKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded prompts are defined.
- Capability inventory: Includes file system read access and network retrieval using
WebFetch. - Sanitization: No explicit input sanitization or filtering logic is specified.
- Analysis: While the ingestion surface exists, the risk is negligible as the primary instructions are sourced from a trusted provider.
Audit Metadata