web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository. This is a standard operation to retrieve up-to-date compliance rules from a trusted source.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external instructions to guide its auditing behavior, which represents a potential attack surface for indirect prompt injection.
- Ingestion points: The skill fetches the latest rules from
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.mdat runtime. - Boundary markers: None specified in the instructions.
- Capability inventory: Reading local files specified by the user and outputting findings in a terse format.
- Sanitization: Not explicitly implemented, as the skill relies on the integrity of the trusted source.
Audit Metadata