impeccable-design-ui

Warn

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONTIME_DELAYED_CONDITIONAL
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The skill directs the agent to automatically run the command npx skills add pbakaus/impeccable if a required sub-skill is missing, which involves executing code from a remote source.
  • [COMMAND_EXECUTION]: The instructions command the agent to perform shell operations to install software, which modifies the local environment.
  • [EXTERNAL_DOWNLOADS]: The skill depends on external code hosted on a third-party repository (pbakaus/impeccable).
  • [TIME_DELAYED_CONDITIONAL]: The execution of the download and installation command is gated by an environment check (checking for missing skills), which triggers the network operation only when dependencies are absent.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user input to trigger different actions and capabilities.
  • Ingestion points: User selection from the menu in SKILL.md.
  • Boundary markers: Absent.
  • Capability inventory: Shell execution (npx) and sub-skill invocation.
  • Sanitization: Manual confirmation is requested for natural language inputs.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Oct 6, 2026, 03:00 AM