ui-ux-design-pro
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill metadata references well-known content delivery networks (CDNs) such as jsDelivr, unpkg, and Iconify to provide access to popular icon libraries and typography. These are standard resources in web development environments.
- [COMMAND_EXECUTION]: Utilizes standard file system modules to read design data, scan user-provided UI files for auditing, and save generated design system reports. These operations are restricted to the skill's primary utility and do not involve unauthorized system access.
- [INDIRECT_PROMPT_INJECTION]: The skill exposes an attack surface by reading user-provided UI source files during the audit process.
- Ingestion points: Reads code from files expanded via globbing in 'cli/commands/audit.ts'.
- Boundary markers: The findings are presented in structured Markdown or JSON formats to the agent.
- Capability inventory: Includes file reading and writing capabilities to manage audit reports and design systems.
- Sanitization: Uses static regular expression patterns to match specific UI issues without executing or dynamically interpreting the file content.
Audit Metadata