web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository to ensure the review uses the latest standards.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external UI code provided by the user, which is a common ingestion point for untrusted data.
- Ingestion points: Reads content from files specified by the user in SKILL.md.
- Boundary markers: No explicit delimiters or boundary warnings are present in the skill instructions.
- Capability inventory: The skill performs read-only operations on local files and network fetches from a trusted source; no file-writing, subprocess execution, or unsafe network operations were detected.
- Sanitization: No specific sanitization or filtering of external file content is described.
Audit Metadata