web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches design guidelines from Vercel Labs' official GitHub repository to use as a reference for UI audits.
- [INDIRECT_PROMPT_INJECTION]: The skill processes local files and external guidelines which represent an indirect prompt injection surface. However, the guideline source is a trusted repository and the ingestion of local files is the primary intended purpose of the skill. Evidence chain: (1) Ingestion points: local files and GitHub URL in SKILL.md; (2) Boundary markers: none specified; (3) Capabilities: file reading and network fetching; (4) Sanitization: none specified.
Audit Metadata