web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill is configured to fetch guidelines from an external source at runtime.
- Evidence: It retrieves rules from
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.mdusing WebFetch. This source is an official repository from a well-known organization. - [INDIRECT_PROMPT_INJECTION]: The skill ingests instructions from a remote URL that are used to guide the agent's behavior during code reviews.
- Ingestion points: The
command.mdfile fetched from GitHub (SKILL.md). - Boundary markers: None present; the skill treats the fetched rules as authoritative instructions.
- Capability inventory: The skill has file system read access and network read access via WebFetch.
- Sanitization: No sanitization or validation of the remote markdown content is described.
Audit Metadata