web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches updated UI/UX guidelines from Vercel Labs' public repository on GitHub (
vercel-labs/web-interface-guidelines). This is documented as an optional path to ensure the latest standards are applied. - [INDIRECT_PROMPT_INJECTION]: The skill processes external source code files which may contain embedded instructions (e.g., in code comments) designed to influence the agent's behavior during the audit.
- Ingestion points: Reads local files or file patterns specified by the user via
$ARGUMENTS. - Boundary markers: The instructions do not define specific delimiters to separate the UI code data from the agent's analysis instructions.
- Capability inventory: The skill is limited to reading files and outputting audit findings in a terse text format; it does not have write or broad network capabilities for data exfiltration during the auditing phase.
- Sanitization: No explicit sanitization or filtering of the file content is mentioned before it is processed by the agent.
Audit Metadata