ui-ux-pro-max
Fail
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: HIGHCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands for system verification and search operations. It specifically directs the use of
sudofor dependency installation on Linux systems, which constitutes a privilege escalation risk. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection. Ingestion points: User queries are passed as unvalidated arguments to a local Python script. Boundary markers: The agent is not instructed to treat the script's output as untrusted or to use delimiters. Capability inventory: The skill can execute subprocesses and read local files. Sanitization: There is no evidence of input validation or output escaping for user-provided strings.
Recommendations
- AI detected serious security threats
Audit Metadata