web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Mar 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel's official GitHub repository. This is a legitimate operation from a trusted source to retrieve the latest rules for design auditing.
- [PROMPT_INJECTION]: The skill processes user-provided source code files, which creates a surface for indirect prompt injection.
- Ingestion points: Local files such as React components, HTML, and CSS files provided for review.
- Boundary markers: None; the skill does not use delimiters or instructions to ignore embedded commands in the processed files.
- Capability inventory: Uses file-read operations to access user code and WebFetch to retrieve the ruleset.
- Sanitization: None; the content of the files is processed as-is.
Audit Metadata