web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches design guidelines and audit instructions from Vercel Labs' official GitHub repository (
vercel-labs/web-interface-guidelines). This is a trusted source used for retrieving configuration and rule definitions. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from an external source and local user files, which creates a potential surface for indirect prompt injection.
- Ingestion points: Fetches remote guidelines from a GitHub URL and reads user-specified local files.
- Boundary markers: No specific delimiters or safety instructions are defined to separate the fetched rules from the target content.
- Capability inventory: The skill uses
WebFetchto retrieve rules and reads local files. It does not possess file-writing, shell execution, or system modification capabilities. - Sanitization: No explicit sanitization or filtering is applied to the ingested content.
Audit Metadata