web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design guidelines from Vercel Labs' official GitHub repository (vercel-labs/web-interface-guidelines) to serve as the reference for UI reviews.
- [PROMPT_INJECTION]: The skill reviews user-provided files and applies instructions from a remote source, which represents an indirect prompt injection surface.
- Ingestion points: Reads local UI code files or patterns provided by the user.
- Boundary markers: The skill does not specify markers or instructions to isolate the user's code content from the agent's instructions.
- Capability inventory: The agent reads local workspace files and performs network fetches using the WebFetch tool.
- Sanitization: No sanitization or filtering of the user-provided file content is mentioned prior to processing.
Audit Metadata