web-design-guidelines

Pass

Audited by Gen Agent Trust Hub on Apr 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository.\n
  • Evidence: https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md\n- [PROMPT_INJECTION]: The skill processes data from external guidelines and user-provided code, creating a surface for indirect instructions.\n
  • Ingestion points: references/guidelines.md, the remote GitHub URL in SKILL.md, and user-specified files.\n
  • Boundary markers: Absent.\n
  • Capability inventory: Reading local files and performing network fetches via curl.\n
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 5, 2026, 12:33 AM
Security Audit — agent-trust-hub — web-design-guidelines