ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides standard prerequisite instructions for users to install Python on various operating systems (e.g.,
sudo apt install python3). These are informational and intended for manual setup by the user, not automated execution by the agent. - [DYNAMIC_EXECUTION]: The script
scripts/design_system.pyusesjson.loadsto parse structured configuration data from the bundledui-reasoning.csvfile. This is a safe and standard implementation for handling local structured data. - [DATA_EXPOSURE]: No evidence was found of scripts accessing sensitive local paths such as SSH keys, cloud credentials, or environment files. File operations are restricted to the skill's data directory and a local
design-system/output folder for persistence as documented. - [EXTERNAL_DOWNLOADS]: The skill does not perform any automated downloads of external binaries or scripts. It references Google Fonts and Icon libraries (Phosphor, Lucide) for documentation purposes, which are well-known and safe resources.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user queries to search its database, the data source is locally bundled CSV content. There is no ingestion of untrusted remote data that could lead to indirect injection attacks.
Audit Metadata