ui-design
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions include fetching external content from a remote URL to perform accessibility audits. * Ingestion points: The agent is directed to fetch the Vercel Web Interface Guidelines from raw.githubusercontent.com in SKILL.md. * Capability inventory: The skill relies on the agent's ability to fetch web content to retrieve auditing rules. * Sanitization: The skill does not explicitly mention sanitization or validation of the fetched markdown content. * Boundary markers: The skill does not provide explicit delimiters or instructions to ignore potential commands within the external data.
- [EXTERNAL_DOWNLOADS]: The skill fetches design and accessibility guidelines from Vercel Labs' official GitHub repository. This is a reference to a well-known and trusted source for industry standards.
Audit Metadata