web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design guidelines from Vercel Labs' official GitHub repository (
raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md) to guide the UI auditing process. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from an external URL and local files. This creates a surface for indirect prompt injection, as the agent is instructed to follow rules retrieved from the external source.
- Ingestion points: Fetches markdown content from a GitHub URL and reads user-specified local files.
- Boundary markers: No specific delimiters or safety warnings are provided for the fetched content.
- Capability inventory: The skill utilizes file reading and web fetching capabilities.
- Sanitization: No explicit sanitization or validation of the fetched guidelines is performed.
Audit Metadata