web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches latest UI guidelines from Vercel Labs' official GitHub repository (https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md).
- [INDIRECT_PROMPT_INJECTION]: The skill processes instructions from a remote source to determine its review logic.
- Ingestion points: Guidelines fetched from the Vercel Labs GitHub URL and local code files provided by the user.
- Boundary markers: Not present.
- Capability inventory: The skill uses WebFetch for network retrieval and has read access to files specified by the user.
- Sanitization: No sanitization is performed on the remote instructions before they are applied by the agent.
Audit Metadata