web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches interface guidelines from a remote repository hosted by a recognized organization to ensure the review criteria are up to date.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting and processing untrusted data (local user files and remote guidelines), which creates a potential surface for indirect prompt injection.
- Ingestion points: Remote guideline file (command.md) and local user files targeted for auditing (as specified in SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions defined to isolate the processed content from the agent's core instructions.
- Capability inventory: The skill requires network access to fetch guidelines and file system read access to analyze code.
- Sanitization: No sanitization, filtering, or validation of the ingested content is specified before the data is processed by the agent.
Audit Metadata