ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides UI/UX design recommendations by searching local CSV datasets via a BM25 ranking algorithm implemented in Python.
- [COMMAND_EXECUTION]: The skill instructions direct the AI agent to execute local Python scripts (
scripts/search.py) to retrieve design information. This is the intended functional mechanism and does not involve arbitrary or unsanitized shell command execution. - [INDIRECT_PROMPT_INJECTION]: The skill includes a 'persistence' feature that writes design systems to Markdown files (
design-system/MASTER.md). These files are intended to serve as a persistent context for the agent in future sessions. While this is a data ingestion surface, it is used exclusively for documenting UI rules and follows a safe, structured pattern. - [EXTERNAL_DOWNLOADS]: The skill mentions external resources like Google Fonts and Simple Icons in its datasets. These are references for the user's design implementation and are from well-known, trusted services. The skill code itself does not perform any network fetching.
Audit Metadata