ui-ux-pro-max
Warn
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill workflow requires the agent to execute a local Python script using shell commands where user-supplied content (product types, industries, keywords) is passed directly as arguments. This presents a risk of command injection if the input contains shell metacharacters.
- [PRIVILEGE_ESCALATION]: The skill's prerequisite section includes shell commands that use
sudoto install system packages, facilitating high-privilege operations. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its ingestion of untrusted user requirements. Mandatory Evidence: 1. Ingestion points: User requirements used as search queries (Step 2 and Step 3 in SKILL.md). 2. Boundary markers: Absent in shell command construction. 3. Capability inventory: Execution of local scripts via
python3subprocesses. 4. Sanitization: Absent; the skill does not instruct the agent to escape or validate user-provided strings before interpolation into shell commands.
Audit Metadata