ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, data exfiltration attempts, or hardcoded credentials were found across the scripts or data files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data from internal CSV files to generate design recommendations. While this represents a vulnerability surface where data influences agent behavior, the data sources are static and provided within the skill package, following standard architectural patterns for documentation-based skills.
- [COMMAND_EXECUTION]: The SKILL.md file contains installation instructions using system package managers (brew, apt, winget). These are prerequisite setup guides for the user to ensure the Python runtime is available and do not represent automated malicious execution.
- [EXTERNAL_DOWNLOADS]: The data files contain numerous URLs pointing to official documentation for well-known frameworks (e.g., React, Angular, Next.js) and Google Fonts. These are legitimate references to trusted developer resources.
Audit Metadata