ui-ux-pro-max-skill
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing an external global Node.js package and cloning a GitHub repository from sources not associated with the stated author or trusted list.
- Evidence: Instructions to run
npm install -g uipro-cliandgit clone https://github.com/nextlevelbuilder/ui-ux-pro-max-skill.gitinSKILL.md. - [DYNAMIC_EXECUTION]: The skill generates design system tokens and configuration files, which are then written to the local filesystem.
- Evidence: The
StackExporter.write_allmethod writestokens.css,tailwind.config.js,typography.ts, andcolors.tsto the./src/design-system/directory. - [INDIRECT_PROMPT_INJECTION]: The skill ingests natural language descriptions from users to generate design system logic and code, creating a vulnerability surface.
- Ingestion points: The
descriptionparameter in theDesignSystemGenerator.generate()andReasoningEngine.search()methods inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands were identified in the usage examples.
- Capability inventory: The skill possesses file-writing capabilities through the
StackExporterclass and generates executable configuration files liketailwind.config.js. - Sanitization: The provided documentation does not show evidence of input validation, filtering, or escaping for the
descriptionstring before it is used to drive generation logic.
Audit Metadata