skills/minicoohei/ai-agent-camp/ui-ux-pro-max/Snyk

ui-ux-pro-max

Warn

Audited by Snyk on Jul 30, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). SKILL.md’s runtime workflow invokes python3 skills/ui-ux-pro-max/scripts/search.py "<product_type> <industry> <keywords>" --design-system (and related searches) using user-provided requirement text, so an outsider can submit free-text that the LLM/agent uses as query input and then consumes within the design-system generation step.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 30, 2026, 08:28 PM

Issues

1

Security Audit — snyk — ui-ux-pro-max