web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches current design guidelines from Vercel Labs' official GitHub repository at
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md. This is a legitimate functional requirement for obtaining updated rule sets. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources, specifically the fetched guidelines and the user's local files, to perform its audit.
- Ingestion points: External content is retrieved via
WebFetchfrom the guidelines URL and via file-reading tools for the user's source code. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the audited content.
- Capability inventory: The skill utilizes network fetching (WebFetch) and file reading capabilities.
- Sanitization: There is no explicit sanitization or filtering of the fetched content mentioned in the skill instructions.
Audit Metadata