web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Feb 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill fetches a markdown file containing guidelines from
https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md. Asvercel-labsis a trusted organization, this download is considered safe. - [PROMPT_INJECTION] (LOW): The skill retrieves instructions (guidelines) from an external source and applies them to its output. This creates an indirect prompt injection surface.
- Ingestion points:
command.mdfetched via WebFetch inSKILL.md. - Boundary markers: Not present; the agent is instructed to follow rules within the fetched content directly.
- Capability inventory: The skill can read local files and perform network fetches.
- Sanitization: None; content is used as instructions for the review process.
Audit Metadata