UI/UX Intelligence Expert
Warn
Audited by Gen Agent Trust Hub on May 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The persistence logic in
scripts/design_system.pycontains a path traversal vulnerability. Thepersist_design_systemfunction uses user-suppliedproject_nameandpagearguments to construct file paths for writing documentation. Because the function only replaces spaces with dashes and does not sanitize directory traversal characters (like..), an agent or malicious actor could potentially overwrite arbitrary files relative to the current working directory. - [COMMAND_EXECUTION]: The
SKILL.mdinstructions contain hardcoded absolute file paths pointing to a specific local volume (/Volumes/MacOS/个人项目/...). This leaks the author's local directory structure and makes the skill non-portable, as the shell commands will fail or behave unpredictably on systems with different volume configurations. - [EXTERNAL_DOWNLOADS]: The skill's typography database in
data/typography.csvincludes references to fetch configuration and CSS imports from Google Fonts. These are well-known and established services used for legitimate design purposes.
Audit Metadata