web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository to perform design audits.
- [PROMPT_INJECTION]: The skill demonstrates an indirect prompt injection surface because its behavior is guided by external instructions fetched at runtime.
- Ingestion points: Guidelines are retrieved from a remote URL specified in
SKILL.mdbefore reviewing files. - Boundary markers: The skill does not explicitly specify delimiters or instructions to ignore embedded commands within the fetched data.
- Capability inventory: The skill uses file-read operations to audit local source code.
- Sanitization: There is no mention of sanitization or validation for the content retrieved from the remote source.
Audit Metadata