ui-ux-pro-max
Warn
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to execute
npx uipro-cli, which initiates a download of the package from the NPM registry. - [REMOTE_CODE_EXECUTION]: The execution of
npx uipro-cliallows for remote code to run on the user's machine. The package is not associated with a known trusted organization or vendor, posing a risk of executing unverified or potentially malicious code. - [COMMAND_EXECUTION]: The skill documentation explicitly provides a shell command (
npx uipro-cli init --ai claude) for the user to run. This encourages the execution of external tools with the user's local permissions without prior validation of the tool's integrity.
Audit Metadata