ui-ux-pro-max
Warn
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of a local Python script (skills/ui-ux-pro-max/scripts/search.py) to generate its design system recommendations. It also provides commands to install system-level dependencies, including the use of sudo for package management on Linux.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection. Ingestion points: Data returned by the search.py script is incorporated into the agent's context. Boundary markers: The instructions lack explicit delimiters or 'ignore' instructions for the interpolated script output. Capability inventory: The skill performs shell command execution (python3) and filesystem writes (via the --persist flag in SKILL.md). Sanitization: No sanitization or validation of user-provided keywords is described before they are passed to the search script.
Audit Metadata