web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from a public repository to use as a rule set for code review. Evidence:
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from both a remote URL and local files, creating a surface where malicious instructions embedded in those files could attempt to influence the agent's behavior during the review process.\n- Ingestion points: Remote markdown guidelines and local user-provided code files (SKILL.md).\n- Boundary markers: None specified to differentiate between instructions and the content being audited.\n- Capability inventory: Uses WebFetch for remote retrieval and file-reading tools for local file access.\n- Sanitization: No explicit validation or sanitization of the fetched content or local file data is described.
Audit Metadata