ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation and utility tool for design intelligence. It does not exhibit any malicious patterns.
- [COMMAND_EXECUTION]: The skill instructs the agent to run a local search script (
scripts/search.py). A code audit of the scripts confirms they are restricted to reading local CSV files and using basic math and regex for ranking search results. There is no use of dangerous functions such aseval,exec, or shell-spawning utilities with untrusted input. - [EXTERNAL_DOWNLOADS]: The
SKILL.mdfile contains instructions for setting up the environment by installing Python via official and trusted package managers (brew,apt,winget). These are standard prerequisites and are considered safe sources. - [INDIRECT_PROMPT_INJECTION]: The search functionality takes user-provided keywords as input. The
core.pyscript implements atokenizefunction that sanitizes input by converting to lowercase and stripping all non-alphanumeric characters, effectively neutralizing potential injection attempts before they reach the processing engine.
Audit Metadata