ui-ux-pro-max
Pass
Audited by Gen Agent Trust Hub on Feb 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
SKILL.mdfile instructs the agent to install software using system package managers, includingsudo apt update && sudo apt install python3. Running commands withsudovia an AI agent is a high-risk privilege escalation vector.\n- [PROMPT_INJECTION]: The skill processes user input and returns design-specific instructions retrieved from data files.\n - Ingestion points: The
search.pyscript takes user input as a CLI argument.\n - Boundary markers: No specific delimiters or instructions to ignore embedded commands are present in the prompt templates.\n
- Capability inventory: The logic is limited to reading local CSV files and printing text; no network, subprocess, or file-write capabilities exist in the Python code.\n
- Sanitization: Input is tokenized for search but not sanitized against instruction-like content.
Audit Metadata