ui-ux-pro-max

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (low risk: 0.10). The skill’s required runtime workflow only ingests the user’s own free-text query string as CLI arguments to scripts/search.py for --design-system/--domain lookups, and the README/CSV data it references appear to be first-party shipped files (no queue/feed/browser/web fetch described).

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (medium risk: 0.60). The skill explicitly instructs the user to run "sudo apt update && sudo apt install python3" (Ubuntu/Debian), which requests elevated privileges and modifies system packages, so it encourages actions that change the machine state with sudo.