web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design rules from a remote source at
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md. This is an official Vercel repository, which is a trusted service for retrieving UI best practices. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from a remote URL and local user files, which represents a standard ingestion surface.
- Ingestion points: Fetches guidelines from Vercel's GitHub repository and reads user-provided source code files (e.g., React, Vue, HTML).
- Boundary markers: None explicitly defined in the instructions to separate fetched rules from the agent's core instructions.
- Capability inventory: The skill uses
WebFetchfor reading remote data and has read-access to project files. It does not possess capabilities for file modification, shell command execution, or data exfiltration. - Sanitization: No specific sanitization or validation of the fetched content is mentioned, though the source is highly trusted.
Audit Metadata