web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design guidelines from Vercel Labs' official GitHub repository to use as a reference for UI audits.
- [PROMPT_INJECTION]: The skill is designed to follow rules and formatting instructions retrieved from an external URL, creating a surface for indirect prompt injection. As the source is a trusted organization, the risk is negligible.
- Ingestion points:
SKILL.md(fetches content fromhttps://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md) - Boundary markers: Absent; the agent is instructed to directly apply all fetched rules and formatting instructions.
- Capability inventory: Local file reading for auditing and logic application as defined in
SKILL.md. - Sanitization: Absent.
Audit Metadata