web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design and accessibility guidelines from Vercel Labs' official GitHub repository. This external reference is used to provide the latest audit rules for the agent to follow.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from both remote guidelines and local user files, creating a surface for indirect prompt injection.
- Ingestion points: User-specified files/patterns and guidelines fetched from
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md(SKILL.md). - Boundary markers: No explicit delimiters or instructions are used to distinguish guidelines or file content from system instructions.
- Capability inventory: The skill has capabilities to read local files and perform network fetches via WebFetch.
- Sanitization: No sanitization or validation of the fetched content or user files is performed before the agent processes them as instructions.
Audit Metadata