ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill implements a local search engine using the BM25 algorithm to query static CSV files provided within the skill package. All operations are confined to the local filesystem and do not involve external network requests.
- [EXTERNAL_DOWNLOADS]: Design guidelines for Three.js and GSAP provide references to official CDN locations (e.g., cdnjs.cloudflare.com) for library loading. These references to well-known services are documented for the user's benefit and do not involve execution by the agent.
- [SAFE]: The design system persistence feature includes a
safe_slugfunction that sanitizes project and page names using a strict regular expression ([^a-z0-9_-]+). This effectively prevents path-traversal vulnerabilities by ensuring written files remain within the designated output directory. - [SAFE]: The Python scripts use only the standard library and contain no patterns for arbitrary command execution, credential harvesting, or data exfiltration.
Audit Metadata