ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates on a bundled dataset of CSV files and provides a local CLI for searching guidelines. Extensive analysis of the scripts and data shows no evidence of malicious intent or hidden payloads.
- [DATA_EXFILTRATION]: No unauthorized network activity or data exfiltration mechanisms were identified. References to external URLs in the dataset point exclusively to trusted services such as Cloudflare (cdnjs) and Google Fonts for legitimate developer documentation and font loading.
- [PERSISTENCE]: The skill manages file persistence through a design system generator that implements a
safe_slugfunction to sanitize inputs, effectively preventing path traversal or arbitrary file write vulnerabilities. - [DYNAMIC_EXECUTION]: Data processing is conducted using standard Python CSV and JSON libraries. The skill does not use unsafe execution functions like eval() or exec() on user-provided or external data.
- [INDIRECT_PROMPT_INJECTION]: The skill uses boundary markers and clear logical separation in its generated instructions to ensure that design advice is presented as data for the agent rather than overriding system instructions.
Audit Metadata