vercel-design
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/fetch-updates.shconnects tohttps://vercel.com/design/guidelinesto retrieve updated design documentation. This targets a well-known service and is consistent with the skill's purpose of providing design standards. - [COMMAND_EXECUTION]: The skill includes a shell script
scripts/fetch-updates.shthat usescurlandgrepto parse data from the official Vercel design page. The execution is limited to data extraction and does not involve piping remote content to a shell. - [DATA_EXPOSURE]: The documentation in
SKILL.mdincludes best practices for UI development, such as using generic placeholders (e.g.,YOUR_API_TOKEN_HERE) for sensitive inputs. No hardcoded credentials or sensitive file paths are accessed by the skill.
Audit Metadata