Vercel's official interface guideline review skill: Before each review, it fetches the latest Web Interface Guidelines from GitHub, checks them against the files you specify, and lists issues in file:line format.
skills.sh install count 792813 (+4577 / 24h)
Security Audit: Risk warnings present
- Initiates network requests or calls external APIs / remote MCPs
- Audit scope: GitHub vercel-labs/agent-skills/skills/web-design-guidelines/SKILL.md (scans only the SKILL.md text)
Rationale
- Rules cover accessibility, focus states, forms, animations, typography, images, performance, navigation and state, touch targets, safe areas, dark mode, internationalization, hydration safety, and copywriting, plus a list of anti-patterns to flag
- Output is consistently grouped by file with concise file:line conclusions, making it easy to fix issues one by one
- SKILL.md itself is only a dozen lines long; all rules reside in the remote file, so no reinstallation is needed when guidelines are updated
- skills.sh installs 4577 in 24 hours, with a cumulative total of 792813 (indicating only level of attention)
Usage
- npx skills add https://github.com/vercel-labs/agent-skills --skill web-design-guidelines
- Tell the agent to “review my UI” and provide files or wildcard paths; if no files are specified, it will ask first
- Requires the client to have network-reading tools such as WebFetch
Risks
- The network requests in the audit prompt align with their purpose: each run fetches command.md from vercel-labs/web-interface-guidelines on raw.githubusercontent.com, and SKILL.md mandates using the rules and output format from that file, effectively delegating review instructions to a remote file with an unfixed version
- Reviews only, does not modify; some rules are phrased in terms of React / Tailwind syntax (e.g., <Link>, focus-visible:ring-*)