ui-ux-pro-max
Warn
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill includes instructions to perform system updates and software installation using
sudoon Linux environments (e.g.,sudo apt update && sudo apt install python3). Executing commands with root privileges introduces a risk of unauthorized system modifications.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text to drive its design recommendation engine and persistence workflow.\n - Ingestion points: User requirements and keywords are passed directly as arguments to the
search.pyscript inSKILL.md.\n - Boundary markers: The instructions use double quotes around the input string, which provides minimal protection against injection if the script processes the string dynamically.\n
- Capability inventory: The skill has the ability to write files to the local filesystem (
design-system/MASTER.md,design-system/pages/*.md).\n - Sanitization: There is no evidence of input validation or sanitization within the provided instructions to prevent malicious content from being written to the generated documentation files.\n- [COMMAND_EXECUTION]: The workflow relies on executing a local Python script (
scripts/search.py) with arguments derived from user input. This pattern poses a risk of command injection if the underlying script handles shell arguments unsafely.
Audit Metadata