AIOZ UI Skills

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 10:46 PM UTC
• Version: 1.0.1

Overview

This skill is a design-system coding guide with no hidden execution or persistence behavior; the remaining issues are documentation quality and scoping notes.

Reasonable to install for AIOZ UI V3 frontend work. Before relying on it, fix or account for the chart filename mismatch and the V2/V3 wording inconsistency so agents do not generate the wrong imports or look for a missing reference file.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• MCP Tool Poisoning: Hidden Instructions, Unicode Deception, Parameter Description Injection
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

Whitespace Padding

Medium

• Category: Prompt Injection
• Confidence: 70% confidence

Finding

Large whitespace padding was detected (a block of blank lines or a long run of spaces). This can push injected instructions below or to the right of the visible area so a human reviewer never sees them while the agent still reads them. Manual review of the hidden content is recommended.

Content

Scanner excerpt · SKILL.md (reported line 71)May include surrounding context.

md

**Input:** Figma MCP `name` field on a symbol/instance node
**Output:** React component to use

| Figma Node Name Pattern | React Component   | Import                                                                                                                      |
| ----------------------- | ----------------- | --------------------------------------------------------------------------------------------------------------------------- |
| `Button/*`              | `Button`          | `import { Button } from '@aioz-ui/core-v3/components'`                                                                      |
| `Fields/*`              | `Input`           | `import { Input } from '@aioz-ui/core-v3/components'`                                                                       |

Vague Triggers

Low

• Category: Not specified by scanner
• Confidence: 86% confidence

Finding

The manifest description says to read this file whenever you need to build 'any chart, graph, or data visualization,' which is very broad and lacks boundaries or exclusion conditions. In a skill-selection system, this could overlap with many ordinary UI or analytics tasks and cause unintended invocation of this reference.

Content

No source excerpt is available for this finding.

Intent-Code Divergence

Low

• Category: Not specified by scanner
• Confidence: 97% confidence

Finding

The document frontmatter and title describe this file as an AIOZ UI V3 component reference, and all imports use @aioz-ui/core-v3/components. However, the inline guidance says 'V2 only' and lists Storybook titles ending in 'V2', which directly contradicts the file's stated versioning and examples rather than merely omitting detail.

Content

No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.