web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches web design guidelines and output instructions from Vercel Labs' official GitHub repository. This external content is used to define the rules for the agent's auditing process.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and follow rules and formatting instructions provided in a remote file (
command.md), creating a dependency on external content to guide agent behavior. - Ingestion points: The
SKILL.mdfile defines a specific URL (vercel-labs/web-interface-guidelines) to be retrieved via WebFetch at runtime. - Boundary markers: There are no explicit delimiters or instructions defined to isolate the fetched rules from the agent's core instructions.
- Capability inventory: The skill possesses the capability to read local project files and output formatted audit findings.
- Sanitization: The skill does not specify any validation or sanitization of the remote content before it is interpreted as rules for the auditing task.
Audit Metadata