ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's testing suite in
scripts/tests/uses Python'ssubprocessmodule to run integration tests against the search tool's CLI interface. These operations are limited to the local environment and are used to verify internal logic. - [SAFE]: The design system persistence logic in
scripts/design_system.pyincludes asafe_slugfunction that uses regular expressions to sanitize project and page names. This mitigates path traversal risks by ensuring that generated files are stored only within the intended directory structure. The search tool operates on curated local CSV datasets using a BM25 implementation and does not perform external network requests or dynamic code execution.
Audit Metadata