web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from the Vercel Labs repository on GitHub.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied UI code which represents a surface for indirect instructions.
- Ingestion points: Local file content from user-specified paths or patterns.
- Boundary markers: No delimiters or isolation logic provided in the instructions.
- Capability inventory: File system read access and network fetching (WebFetch).
- Sanitization: No evidence of content sanitization or instruction filtering.
Audit Metadata