web-design-guidelines-vercel

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The SKILL.md explicitly directs the agent to "Fetch the latest guidelines" via WebFetch from the public URL https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md and to read and apply those fetched rules (including output-format instructions) as part of its review, so externally hosted content can directly influence the agent's decisions and actions.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 1.00). The skill explicitly instructs fetching and using https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md at runtime via WebFetch to obtain the rules and output-format instructions that the agent must follow, so the fetched content directly controls agent prompts/instructions and is a required dependency.