web-design-guidelines

[Skill Scanner] System prompt extraction attempt Benign and coherent. The skill’s stated purpose (UI code review against live Web Interface Guidelines) aligns with its capabilities (fetch guidelines, read files, apply rules, output findings). The only operational concern is dependency on an external guidelines source, which is typical for such tools and manageable with integrity checks (hash verification, trusted sources). No suspicious data flows or credential requirements are evident in the fragment. LLM verification: The skill's stated purpose and workflow are coherent and align with a UI guideline review tool. However, the static analyzer flag indicating a system prompt extraction attempt in SKILL.md is suspicious and warrants closer inspection of prompt handling and disclosure logic. If the system prompt content can be accessed or exfiltrated, this could be a potential security risk. Overall, the tool appears benign in intent but requires remedial review of prompt access patterns to ensure no inadvertent l