Skills
Navigate
skills/truongnat/aix/ui-ux-system-pro/Gen Agent Trust Hub

ui-ux-system-pro

Warn

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user or agent to use npx @adev/colors-check in references/color-database.md and references/ux-rules.md to verify color accessibility. The npx command downloads and executes packages from the NPM registry.
  • [REMOTE_CODE_EXECUTION]: The package @adev/colors-check is not a recognized or standard industry tool for accessibility testing. Relying on npx to fetch and run an unverified, unversioned package from a public registry introduces a risk of remote code execution, particularly if an attacker registers the package name or if the source is untrusted.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 9, 2026, 06:14 PM