ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands for environment validation and software installation, including the use of elevated privileges via
sudo apt installfor installing Python on Linux systems. - [COMMAND_EXECUTION]: The workflow involves executing a bundled Python script (
search.py) which processes user-provided strings as CLI arguments. - [EXTERNAL_DOWNLOADS]: The skill utilizes well-known and official package managers (Homebrew, Apt, Winget) to fetch and install required dependencies.
- [COMMAND_EXECUTION]: The skill performs file system write operations to persist design systems in the
design-system/directory when the--persistflag is used. - [COMMAND_EXECUTION]: Mandatory Evidence Chain for Indirect Injection Surface:
- Ingestion points: User-provided queries and project names passed as arguments to search.py.
- Boundary markers: None present in the instructions.
- Capability inventory: Script execution and file system writes.
- Sanitization: No explicit sanitization or escaping of input before shell execution is mentioned.
Audit Metadata