ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses local Python scripts (
search.py) to query its design database. The instructions specify invoking these scripts via absolute paths to ensure the correct code is executed within the skill's environment. - [DATA_EXFILTRATION]: No network operations or sensitive file access patterns were detected. The skill operates entirely on local CSV data files provided within the package.
- [PROMPT_INJECTION]: The CSV data contains user experience guidelines, including ethical rules for AI interactions (e.g., requiring disclaimers that content is AI-generated). There are no malicious attempts to override system prompts or bypass safety filters.
- [EXTERNAL_DOWNLOADS]: The skill references external resources such as Google Fonts and Three.js via Cloudflare's CDN. These are documented for the user's implementation and are sourced from trusted, well-known providers.
- [DYNAMIC_EXECUTION]: The
--persistfeature writes design system documentation to the local filesystem. The implementation uses asafe_slugfunction that sanitizes input using regular expressions ([^a-z0-9_-]+) to prevent path traversal attacks.
Audit Metadata