web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository (
github.com/vercel-labs/web-interface-guidelines). This is a trusted source for configuration data. - [PROMPT_INJECTION]: The skill processes untrusted content through indirect prompt injection surfaces:
- Ingestion points: Reads user-provided local files and fetches a remote markdown file (
command.md) from GitHub. - Boundary markers: No explicit delimiters are used to separate the external guidelines or user code from the agent's internal instructions.
- Capability inventory: The skill is limited to reading files and generating UI audit reports.
- Sanitization: There is no evidence of sanitization or filtering of the content retrieved from external files before processing.
Audit Metadata