ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a Python-based CLI tool (
scripts/search.py) to query design guidelines stored in local CSV files. This script handles search logic locally and does not execute arbitrary shell commands. - [DATA_EXPOSURE_AND_EXFILTRATION]: No network access (like
curlorrequests) is present in the scripts. The skill operates entirely on local data files provided within its package. - [INDIRECT_PROMPT_INJECTION]: The skill includes a feature to persist design recommendations to local files (e.g.,
design-system/MASTER.md). While the agent is instructed to read and prioritize these files in future sessions, the source data for these files is the skill's own static CSV guidelines, posing no significant risk of external data poisoning. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns or dynamic execution of untrusted input were detected. The scripts use standard Python libraries for file I/O and text processing.
- [OBFUSCATION]: Analysis of the Python scripts and data files revealed no hidden characters, encoded payloads, or homoglyph attacks.
Audit Metadata