web-design-guidelines

Pass

Audited by Gen Agent Trust Hub on Feb 21, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS] (SAFE): The skill fetches a markdown file containing guidelines from https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md. As vercel-labs is a trusted organization, this download is considered safe.
  • [PROMPT_INJECTION] (LOW): The skill retrieves instructions (guidelines) from an external source and applies them to its output. This creates an indirect prompt injection surface.
  • Ingestion points: command.md fetched via WebFetch in SKILL.md.
  • Boundary markers: Not present; the agent is instructed to follow rules within the fetched content directly.
  • Capability inventory: The skill can read local files and perform network fetches.
  • Sanitization: None; content is used as instructions for the review process.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 21, 2026, 07:11 AM