web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration and rules from Vercel Labs' official GitHub repository. This is a trusted source used to provide up-to-date design guidelines for the audit process.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external URLs and user-provided local files, which creates a surface for indirect instructions.
- Ingestion points: External guidelines URL and local code files (SKILL.md)
- Boundary markers: None specified in the instructions.
- Capability inventory: Network fetch (read-only) and local file access (read-only).
- Sanitization: No explicit sanitization or filtering of fetched content is described.
Audit Metadata