Security risk report for @forgecat/vercel-labs_agent-skills_web-design-guidelines v0.0.9
Source Integrity
Low
Profile is sourced from a pinned upstream commit (063bee94c3f4df8453406c830b0a7df0f2860278) in the legitimate Vercel Labs agent-skills repository.
ForgeCat-added materials (license references, README) are clearly labeled and do not alter upstream intent.
No typosquatted, attacker-controlled, or suspicious dependencies are introduced.
Agent Intent
INT-000Medium
The SKILL.md instructs the agent to fetch live, arbitrary content from an external URL before each review session ('Fetch fresh guidelines before each review'), meaning the agent's behavior is governed by remotely-controlled, unverified content at runtime.
This pattern is a medium-risk indirect prompt-injection vector: a compromised or replaced file at the raw GitHub URL could silently alter the agent's rules and output without any change to the installed profile.
No explicit credential harvesting, role-hijacking, or exfiltration instructions are present, keeping this below high.
Details
Evidence
"Fetch fresh guidelines before each review: https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md"
"Use WebFetch to retrieve the latest rules. The fetched content contains all the rules and output format instructions."
Permissions
Low
No tools are declared in the profile; the skill description indicates file reading and pattern matching, which are minimal and aligned with the stated purpose of reviewing UI code.
No shell, file_write, file_delete, or other high-risk operations are requested.
WebFetch is used only to retrieve published guidelines, not to execute arbitrary code or modify files.
Details
Evidence
Profile declares '(none declared)' for tools.
SKILL.md describes only read-only operations: 'Read the specified files' and 'Check against all rules'.
MCP Risk
Low
No MCP servers are defined in the profile.
The skill relies on standard agent capabilities (file reading, web fetch) without custom binary execution or unrestricted access.
ForgeCat