ui-ux-pro-max

Warn

Audited by Gen Agent Trust Hub on Jul 31, 2026

Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The instructions in SKILL.md guide the agent to execute shell commands for prerequisite installation and core functionality. This includes high-privilege commands like sudo apt install python3 to set up the environment.
  • [PROMPT_INJECTION]: The skill processes user-provided keywords through a search script that aggregates results from local CSV files. This creates a surface for indirect prompt injection where malicious queries or data in the CSVs could influence agent behavior. Ingestion points: User-provided search queries passed to scripts/search.py via SKILL.md. Boundary markers: None. Capability inventory: Shell command execution and local file access. Sanitization: Input is lowercased and most punctuation is removed in scripts/core.py.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jul 31, 2026, 04:34 PM
Security Audit — agent-trust-hub — ui-ux-pro-max