Skip to content
← Registry
Trust Report

web-design-guidelines

Web platform design and accessibility guidelines. Use when building web interfaces, auditing accessibility, implementing responsive layouts, or reviewing web UI code. Triggers on tasks involving HTML, CSS, web components, WCAG compliance, responsive design, or web performance.

69
SUSPICIOUS
Format: openclawScanner: v0.7.1Duration: 64msScanned: 5d ago · Apr 3, 1:25 PMSource →
Embed this badge
AgentVerus SUSPICIOUS 69AgentVerus SUSPICIOUS 69AgentVerus SUSPICIOUS 69
[![AgentVerus](https://agentverus.ai/api/v1/skill/147ec3a1-b1e0-4e93-9f72-0571a6f2f679/badge)](https://agentverus.ai/skill/147ec3a1-b1e0-4e93-9f72-0571a6f2f679)
Community Discussion

Community Comments

Public comments are the active feedback surface on skill reports right now. Use them to share implementation notes, edge cases, and operator context.

0 comments

Sign in to comment on this skill

No comments yet. Be the first to share your thoughts.

Continue the workflow

Keep this report moving through the activation path: rescan from the submit flow, capture real-world interactions, and wire the trust endpoint into your automation.

https://agentverus.ai/api/v1/skill/147ec3a1-b1e0-4e93-9f72-0571a6f2f679/trust
Personalized next commands

Use these current-skill command blocks to keep this exact report moving through your workflow.

Record an interaction
curl -X POST https://agentverus.ai/api/v1/interactions \
  -H "Authorization: Bearer at_your_api_key" \
  -H "Content-Type: application/json" \
  -d '{"agentPlatform":"openclaw","skillId":"147ec3a1-b1e0-4e93-9f72-0571a6f2f679","interactedAt":"2026-03-15T12:00:00Z","outcome":"success"}'
Fetch trust JSON
curl https://agentverus.ai/api/v1/skill/147ec3a1-b1e0-4e93-9f72-0571a6f2f679/trust

Category Scores

94
Permissions
25
Injection
87
Dependencies
95
Behavioral
95
Content
100
Code Safety

Findings (9)

highHidden instructions in HTML comment-25

HTML comment contains instruction-like content that may be an attempt to inject hidden behavior.

<!-- Explicit override for known RTL content -->

Remove hidden instructions from HTML comments. All skill behavior should be visible.

injectionASST-01
mediumUnknown external reference-8

The skill references an unknown external domain which is classified as medium risk.

https://analytics.example.com

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
highCapability contract mismatch: inferred network access is not declared-6

The scanner inferred a risky capability from the skill content/metadata, but no matching declaration was found. Add a declaration with a clear justification, or remove the behavior.

Content pattern: https://fonts.googleapis.com

Declare this capability explicitly in frontmatter permissions with a specific justification, or remove the risky behavior.

permissionsASST-04
highHidden instructions in HTML comment-25

HTML comment contains instruction-like content that may be an attempt to inject hidden behavior.

<!-- Good: always enabled, validate on submit -->

Remove hidden instructions from HTML comments. All skill behavior should be visible.

injectionASST-01
highHidden instructions in HTML comment-25

HTML comment contains instruction-like content that may be an attempt to inject hidden behavior.

<!-- DNS prefetch for non-critical origins -->

Remove hidden instructions from HTML comments. All skill behavior should be visible.

injectionASST-01
mediumCredential form automation detected (inside code block)-5

Found credential form automation pattern: "input type="password""

<input type="password" autocomplete="new-password" name="password">

Treat automated interaction with login/password forms as sensitive credential handling. Require user approval before filling credentials or automating authenticated sign-in flows.

behavioralASST-05
lowUnknown external reference-5

The skill references an unknown external domain which is classified as low risk.

https://cdn.example.com

Verify that this external dependency is trustworthy and necessary.

dependenciesASST-04
infoSafety boundaries defined

The skill includes explicit safety boundaries defining what it should NOT do.

Safety boundary patterns detected in content

Keep these safety boundaries. They improve trust.

contentASST-09
infoOutput constraints defined

The skill includes output format constraints (length limits, format specifications).

Output constraint patterns detected

Keep these output constraints.

contentASST-09