ui-ux-pro-max
Warn
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The instructions in
SKILL.mdguide the agent to execute shell commands for prerequisite installation and core functionality. This includes high-privilege commands likesudo apt install python3to set up the environment. - [PROMPT_INJECTION]: The skill processes user-provided keywords through a search script that aggregates results from local CSV files. This creates a surface for indirect prompt injection where malicious queries or data in the CSVs could influence agent behavior. Ingestion points: User-provided search queries passed to
scripts/search.pyviaSKILL.md. Boundary markers: None. Capability inventory: Shell command execution and local file access. Sanitization: Input is lowercased and most punctuation is removed inscripts/core.py.
Audit Metadata