web-design-guidelines

[Skill Scanner] System prompt extraction attempt BENIGN: The skill descriptor is coherent with its stated purpose of reviewing UI code against Web Interface Guidelines. It fetches public guidelines, analyzes provided files, and outputs findings in a defined format. There are no credential requirements or suspicious data flows evident in the fragment. Ensure reliable handling of remote guideline fetches in production to avoid failures. LLM verification: The skill's stated purpose and workflow are coherent and align with a UI guideline review tool. However, the static analyzer flag indicating a system prompt extraction attempt in SKILL.md is suspicious and warrants closer inspection of prompt handling and disclosure logic. If the system prompt content can be accessed or exfiltrated, this could be a potential security risk. Overall, the tool appears benign in intent but requires remedial review of prompt access patterns to ensure no inadvertent l