ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection (LOW): The skill processes untrusted data from CSV files and presents it to the agent without sanitization. * Evidence Chain: (1) Ingestion:
scripts/core.pyreads CSVs from thedata/folder via_load_csv. (2) Boundaries: No delimiters or instructions to ignore embedded commands are included in the search results formatted inscripts/search.py. (3) Capabilities: The skill is limited to local file reading and string processing; no network or write capabilities are present. (4) Sanitization: No content filtering or escaping is performed on the data retrieved from the CSV files. - Dynamic Execution (LOW): The script
scripts/search.pymodifies the Python search path (sys.path) at runtime to load a module from the user's home directory (~/.claude/scripts). This allows for dynamic loading of code from a computed path which could be exploited if the home directory is shared or compromised.
Audit Metadata