ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent safety guidelines, bypass constraints, or extract system prompts were found. The instructional language used for 'CRITICAL' design priorities (like accessibility) is standard and benign.
- [DATA_EXFILTRATION]: No evidence of hardcoded credentials, sensitive file path access (e.g., .ssh, .aws), or network operations to untrusted domains. The skill references local project file paths like
design-system/MASTER.mdfor legitimate organizational purposes. - [OBFUSCATION]: No Base64 encoding, zero-width characters, homoglyphs, or other hidden content techniques were detected in the instructions or tables.
- [REMOTE_CODE_EXECUTION]: The skill does not contain commands to download or execute external scripts, nor does it define any unverifiable dependencies.
- [COMMAND_EXECUTION]: The skill instructs the agent to create and read design system files within the project directory. This is a functional requirement for the skill's stated purpose of maintaining design consistency and does not involve arbitrary command execution or privilege escalation.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user requirements to generate design systems, it does not demonstrate any unsafe interpolation or exposure of sensitive capabilities to untrusted data. The risk of indirect injection is negligible as it serves as a static reference for design best practices.
Audit Metadata