ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The design system persistence feature in
scripts/design_system.pycreates a vulnerability surface by interpolating user-controlled data into filesystem paths.\n - Ingestion points: User-supplied project and page names provided via the
scripts/search.pyCLI script.\n - Boundary markers: Absent. The logic lacks checks to ensure that created paths remain within the intended
design-systemdirectory.\n - Capability inventory: The script performs directory creation (
pathlib.mkdir) and file writing (open()) operations based on input parameters.\n - Sanitization: Inadequate. The logic only replaces spaces with hyphens, leaving directory traversal sequences (
..) and path separators intact.\n- [PRIVILEGE_ESCALATION]: TheSKILL.mddocumentation instructs Linux users to usesudo apt update && sudo apt install python3as a prerequisite for running the skill.\n- [COMMAND_EXECUTION]: The skill's primary workflow involves executing a local Python script (scripts/search.py) provided with the skill to process data and generate project files.
Audit Metadata