web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design guidelines from Vercel Labs' official GitHub repository (
vercel-labs/web-interface-guidelines). This is a trusted source and the operation is consistent with the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves instructions and output formatting rules from an external Markdown file, creating a potential surface for indirect prompt injection.
- Ingestion points: External guidelines are fetched from a remote URL via
WebFetchat runtime. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the ingestion process.
- Capability inventory: The skill is restricted to reading local files and generating agent responses based on the fetched rules.
- Sanitization: No sanitization or validation of the fetched Markdown content is performed before processing.
Audit Metadata