Ui Ux Pro Max

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 8:17 AM UTC
• Version: 0.1.0

Overview

This is a UI/UX design helper with disclosed optional setup and file-saving commands, and I found no hidden code, credential access, exfiltration, or destructive behavior.

Review the Python installation commands before running them, especially the sudo apt example, and use --persist only when you want the skill to create or update design-system files in the current project. The inspected artifact otherwise behaves like a design reference and workflow guide.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (5)

Chaining Abuse

High

• Category: Tool Misuse
• Confidence: 92% confidence

Finding

The chained command sudo apt update && sudo apt install python3 combines multiple state-changing privileged operations into one line, which reduces opportunities for review and makes it easier for an agent to execute both steps automatically. In security-sensitive environments, command chaining amplifies the effect of a mistaken or unauthorized execution because the second privileged action proceeds immediately after the first succeeds.

Content

Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.

Ubuntu/Debian:

bash

sudo apt update && sudo apt install python3

Windows:

Sudo/Root Execution

Medium

• Category: Privilege Escalation
• Confidence: 96% confidence

Finding

The skill includes an instruction to run sudo apt update && sudo apt install python3, which asks the agent or user to perform privileged package installation. In an agentic environment, embedded elevation guidance is risky because it can normalize unnecessary root actions and expand impact if the command is executed automatically or without careful review.

Content

Scanner excerpt · SKILL.md (reported line 111)May include surrounding context.

Ubuntu/Debian:

bash

sudo apt update && sudo apt install python3

Windows:

Vague Triggers

Medium

• Category: Not specified by scanner
• Confidence: 95% confidence

Finding

The skill is triggered by extremely broad UI/UX verbs like design, build, implement, review, fix, and improve, which overlap with many ordinary coding requests. That increases the chance the agent will invoke this skill unexpectedly and follow its workflow, including command execution and file-writing behavior, in contexts where the user did not explicitly request this tool.

Content

No source excerpt is available for this finding.

Missing User Warnings

Medium

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The documentation instructs the agent to use a persistence mode that creates and updates project files like design-system/MASTER.md and page override files, but it does not require prior user approval or prominently warn that local files will be modified. In an agent setting, silent writes can alter repositories, introduce unreviewed artifacts, or overwrite existing design documentation.

Content

No source excerpt is available for this finding.

Natural-Language Policy Violations

Low

• Category: Not specified by scanner
• Confidence: 88% confidence

Finding

The example user request is written in Vietnamese, which introduces a specific language context, but the document does not clarify whether the skill supports multiple languages or whether this is merely one example. Because there is no explicit user language choice or documented locale limitation, this can conflict with language/locale neutrality expectations.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.