web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design guidelines from Vercel Labs' GitHub repository to ensure reviews use current standards.
- [PROMPT_INJECTION]: The skill processes untrusted user code and external guidelines which constitutes an indirect prompt injection surface.
- Ingestion points: Remote GitHub URL and local user files.
- Boundary markers: Not defined in the instructions.
- Capability inventory: WebFetch for guideline retrieval and local file read access.
- Sanitization: The skill does not explicitly validate or sanitize the structure of the guidelines or code files.
Audit Metadata