ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill's documentation includes standard instructions for setting up the Python environment, which involves using
sudo apt installon Linux distributions. These are routine administrative commands for dependency management and are not used in an obfuscated or hidden manner.\n- [COMMAND_EXECUTION]: The primary functionality of the skill is accessed through the execution of a local Python script (scripts/search.py) with various arguments. This is the intended operation of the tool for searching the design database.\n- [DYNAMIC_EXECUTION]: The skill includes a--persistfeature that dynamically creates and modifies design configuration files (e.g.,design-system/MASTER.md) to maintain state across sessions. This file system activity is scoped to the project's design system folder.\n- [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for ingesting user-provided keywords and industry descriptions through CLI arguments to generate tailored design systems. This constitutes a potential injection surface for untrusted data.\n - Ingestion points: User-supplied strings passed to
search.pyvia the CLI.\n - Boundary markers: Not explicitly defined in the provided instruction examples.\n
- Capability inventory: Local file system write access for persisting design rules.\n
- Sanitization: Not implemented at the instruction layer; the skill relies on the logic in the referenced Python scripts.
Audit Metadata