ui-ux-pro-max
Warn
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [REMOTE_CODE_EXECUTION]: The file
IMPACT-DEMO.mdinstructs the user or agent to runnpx royalsolution-ontosight@0.2.1. This command downloads and executes code from an external registry. The package source 'royalsolution' is not a recognized well-known service or trusted organization. - [REMOTE_CODE_EXECUTION]: Guidelines in
data/stacks/shadcn.csvanddata/stacks/astro.csvrecommend usingnpxto install or initialize projects (e.g.,npx shadcn@latest init,npx astro add tailwind). While these are common developer tools, they involve the execution of remote scripts. - [COMMAND_EXECUTION]:
SKILL.mdcontains instructions for environment setup that involve system package managers and elevated privileges, such assudo apt update && sudo apt install python3on Linux andbrew install python3on macOS. - [EXTERNAL_DOWNLOADS]: The skill references several external resources for fonts and icons, such as Google Fonts URLs in
data/typography.csv(e.g.,fonts.googleapis.com) and Lucide icons indata/icons.csv.
Audit Metadata