web-design-guidelines
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches fresh guidelines from Vercel Labs' official GitHub repository via WebFetch. This is a trusted source used to retrieve auditing rules and complies with best practices for maintaining up-to-date guidelines.
- [PROMPT_INJECTION]: The skill processes untrusted local files for auditing, which creates a surface for indirect prompt injection.
- Ingestion points: The skill reads local files or patterns provided by the user as specified in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions to ignore embedded commands within the files being audited.
- Capability inventory: The skill has the capability to read local files and fetch external data via WebFetch.
- Sanitization: No sanitization or validation of the content of the files being audited is specified in the skill definition.
Audit Metadata