web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches fresh configuration and rules from a public GitHub repository hosted by Vercel Labs before each review.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided UI code alongside remote guidelines, which introduces a potential surface for indirect instructions to influence the agent's behavior.
- Ingestion points: Remote guidelines file (
command.md) and local user files targeted for review. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts in the analyzed content.
- Capability inventory: The skill utilizes file system read access and network fetching via WebFetch.
- Sanitization: There is no evidence of sanitization or structural validation for the content retrieved from the remote URL or the local files.
Audit Metadata