Skills web-design-guidelines

📦

web-design-guidelines

Name: web-design-guidelines
Author: antfu

v1.0.0 Content revision r2 Medium Risk ⚙️ External commands🌐 Network access

Audit Web Interfaces Against Current Guidelines

Interface reviews often miss accessibility, usability, and consistency problems. This skill fetches current Web Interface Guidelines and reports code findings with file and line references.

Supports: Claude Codex Code(CC)

📊 72 Adequate

Install with my Agent

Copy this request to your Agent. It includes the canonical Skill page and manifest.

Agent request

Review the Skillstore skill "web-design-guidelines" from https://skillstore.io/skills/antvu-web-design-guidelines.md and its manifest at https://skillstore.io/api/skills/antvu-web-design-guidelines/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Your Agent should still show its plan and request any confirmation required by the security policy.

Agent-readable resources

Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.

Markdown detail GET /skills/antvu-web-design-guidelines.md Signed manifest GET /api/skills/antvu-web-design-guidelines/manifest Signed lockfile GET /api/skills/antvu-web-design-guidelines/lockfile

Test it

Using "web-design-guidelines". Review the checkout form for accessibility and interaction issues.

Expected outcome:

checkout-form.html:42 - The input has no associated label.
checkout-form.css:118 - Focus styling is removed without a visible replacement.

Using "web-design-guidelines". Audit the navigation components for responsive behavior.

Expected outcome:

navigation.tsx:67 - The menu control does not expose its expanded state.
navigation.css:91 - The mobile menu can extend beyond the viewport.

Using "web-design-guidelines". Review the settings page against all current guidelines.

Expected outcome:

settings-page.tsx:134 - The destructive action lacks a clear confirmation step.

Security Audit

Medium Risk

v5 • 7/23/2026 Open versioned report

The two external-command findings are false positives caused by Markdown backticks and a fenced URL block; neither executes a shell command. The skill intentionally fetches mutable remote instructions, creating a network dependency and an indirect prompt-injection or supply-chain risk.

Files scanned

Lines analyzed

Review items

False positives ignored

Confirmed security concerns (1)

Medium

SKILL.md:23-29

Mutable Remote Instructions

The skill directs the agent to fetch a mutable remote document and follow its rules and output instructions. Upstream changes could alter agent behavior without a skill update.

Lines 23-29 require fresh retrieval and state that fetched content supplies instructions. This creates a clear indirect prompt-injection and supply-chain path.

Capability review items (1)

These are real local capabilities that may be expected for this skill, so they require review but are not counted as confirmed malicious behavior.

Low

SKILL.md:26

Hardcoded URL

https://raw.githubusercontent.com/vercel-labs/web-interface-guidelines/main/command.md

The skill explicitly requires fetching this URL before every review, so network access is intentional. The mutable remote document is then treated as review instructions.

Risk Factors

⚙️ External commands (2)

SKILL.md:19 SKILL.md:25-27

🌐 Network access (1)

SKILL.md:26

Audited by: codex View Audit History →

Share & cite this report

Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.

Open versioned report

Copy report link

https://skillstore.io/skills/antvu-web-design-guidelines/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown badge

[![Skillstore security assessment](https://skillstore.io/badges/skills/antvu-web-design-guidelines/security.svg)](https://skillstore.io/skills/antvu-web-design-guidelines?utm_source=security_passport_badge)

HTML badge

<a href="https://skillstore.io/skills/antvu-web-design-guidelines?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/antvu-web-design-guidelines/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Embed card

<iframe src="https://skillstore.io/embed/skills/antvu-web-design-guidelines.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Academic citations (APA · BibTeX · CFF)

APA citation

antfu. (2026). web-design-guidelines security audit report (audit version 5) [Author version 1.0.0]. Skillstore. https://skillstore.io/skills/antvu-web-design-guidelines/audits/5

BibTeX citation

@techreport{antfu-antvu-web-design-guidelines-2026,
  author = {antfu},
  title = {web-design-guidelines security audit report (audit version 5)},
  institution = {Skillstore},
  year = {2026},
  number = {5},
  url = {https://skillstore.io/skills/antvu-web-design-guidelines/audits/5},
  note = {Author version 1.0.0}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "web-design-guidelines security audit report (audit version 5)"
version: "1.0.0"
type: report
authors:
  - name: "antfu"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/antvu-web-design-guidelines/audits/5"
identifiers:
  - type: other
    value: "skillstore:antvu-web-design-guidelines:audit:5"
    description: "Skillstore immutable audit report identifier"

Compare variants

6 installable variants

Each author remains a separate installable skill. The recommended variant is ranked by Skillstore evidence.

Why this variant is first

Highest Skillstore Score

Author / source Skillstore Score Evidence Confidence Skillstore usage Updated

vercel-labs Recommended

vercel-labs-web-design-guidelines

Skillstore Score 73

Evidence Confidence High

Skillstore usage 52

Updated

2026-08-21

ZhanlinCui

zhanlincui-web-design-guidelines

Skillstore Score 72

Evidence Confidence High

Skillstore usage 133

Updated

2026-08-21

antfu Current

antvu-web-design-guidelines

Skillstore Score 72

Evidence Confidence High

Skillstore usage 18

Updated

2026-08-21

antfu

antfu-web-design-guidelines

Skillstore Score 72

Evidence Confidence High

Skillstore usage 13

Updated

2026-08-21

supercent-io

supercent-io-web-design-guidelines

Skillstore Score 71

Evidence Confidence High

Skillstore usage 60

Updated

2026-08-21

sickn33

sickn33-web-design-guidelines

Skillstore Score 69

Evidence Confidence High

Skillstore usage 9

Updated

2026-08-21

Skillstore Score

Why this score Evidence Confidence: High

Architecture

100

Maintainability

Content

Community

Spec Compliance

What You Can Build

Review a feature before merge

Audit changed interface files for guideline violations before submitting a pull request.

Check accessibility implementation

Inspect form, navigation, and interaction code for accessibility concerns covered by current guidelines.

Validate design system adoption

Review product interface files for consistency, usability, and implementation quality.

Try These Prompts

Review one interface file

Review {file} against the current Web Interface Guidelines. Report each issue with its file and line number.

Audit a component folder

Audit files matching {pattern}. Focus on accessibility, interaction behavior, responsive layout, and visual consistency.

Review a user flow

Review {files} for the {user_flow} journey. Prioritize blockers, accessibility failures, confusing interactions, and inconsistent states.

Run a release readiness audit

Audit {scope} against all current guidelines. Group findings by severity, cite exact locations, identify repeated patterns, and summarize release risks.

Best Practices

Provide exact files or a narrow pattern so findings remain relevant and traceable.
Include the interface purpose and important user flows when requesting a review.
Re-run audits when upstream guidelines or reviewed interface code changes.

Avoid

Do not treat source review as a replacement for browser, keyboard, or assistive-technology testing.
Do not submit broad repository patterns when only one interface area needs review.
Do not accept fetched instructions without considering source integrity and unexpected changes.

Frequently Asked Questions

What does this skill review?

It reviews specified interface source files against rules fetched from the configured Web Interface Guidelines source.

Does it check accessibility?

Yes. It reports accessibility concerns covered by the fetched guidelines, but it does not replace manual testing.

Can it review multiple files?

Yes. Provide a file pattern or an explicit list of files to define the scope.

Does it fix reported issues?

No. The skill reports findings and locations but does not automatically edit files.

Does it require internet access?

Yes. It fetches the latest guideline document from a public GitHub URL before each review.

Can review results change over time?

Yes. The remote guidelines are mutable, so new upstream rules can change findings without a local skill update.

Developer Details

Author

antfu

License

MIT

Author version

v1.0.0

Skillstore revision

Repository

https://github.com/antfu/skills/tree/main/skills/web-design-guidelines/

Ref

89edfdc710d0846129dcee6a929477b04f08052c

Maintenance freshness

7/24/2026

Usage

16 downloads · 181 views

File structure

📄 SKILL.md

📄 SYNC.md