ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute a local Python script (search.py) to query the design database. The script uses a standard BM25 ranking algorithm and built-in Python modules to read from structured CSV files located within the skill's data directory. No unsafe use of shell commands or arbitrary execution was found.\n- [EXTERNAL_DOWNLOADS]: The database files contain URLs for Google Fonts and official documentation for various UI frameworks (e.g., Tailwind CSS, React, Next.js). These references are standard for UI/UX design tasks and target well-known, trusted resources.\n- [INDIRECT_PROMPT_INJECTION]: The agent processes information retrieved from local CSV files to provide design recommendations. While this involves interpreting guidelines and code snippets (such as Do and Don't examples), the information originates from a trusted local dataset and does not include untrusted external input that could be used for injection attacks.
Audit Metadata