web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Apr 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines and instructions from the Vercel Labs official GitHub repository.
- [PROMPT_INJECTION]: The skill retrieves its core instructions and output formatting rules from a remote source, creating an indirect prompt injection surface. 1. Ingestion points: Remote guidelines fetched from GitHub in SKILL.md. 2. Boundary markers: No delimiters are used to separate the fetched rules from other instructions. 3. Capability inventory: The skill reads local project files to perform the UI review. 4. Sanitization: No validation or sanitization is performed on the fetched content before it is incorporated into the agent's logic.
Audit Metadata