web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository to perform UI audits. This is a trusted source used for retrieving the latest design rule definitions.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface by design, as it must process external content to function.
- Ingestion points: Local files provided by the user for UI review and remote instructions fetched from
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md. - Boundary markers: The skill does not define specific delimiters or "ignore" instructions for the content being processed in its current instructions.
- Capability inventory: The skill utilizes the
WebFetchtool for network retrieval and has file system read access to analyze the user's code. - Sanitization: No specific sanitization or validation of the fetched guidelines or user-provided content is performed before interpolation into the agent's context.
Audit Metadata