UI UX Pro Max

• Outcome: Pass
• Latest audit: Sep 10, 2026 · 8:06 PM UTC
• Version: 1.0.0

Overview

This is a UI/UX reference skill made of Markdown design guidance, with no executable code, persistence, credential handling, or hidden data access.

Install this if you want a Chinese-first UI/UX design reference library. Expect it to influence visual design choices broadly when UI design is involved; it does not appear to run code or access private data.

A.I.G

Vulnerability Patterns

• Skill Instruction Hijacking: Alters the agent's session goals or safety constraints when the skill loads
• Agent Memory Poisoning: Writes attacker-controlled rules into memory that affect later sessions
• Remote Payload Retrieval and Execution: Fetches external code whose behavior can change after review
• Embedded Malicious Code: Ships malicious scripts inside the skill and executes them locally
• Unauthorized Access and Privilege Escalation: Obtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (9)

Vague Triggers

Medium

• Confidence: 93% confidence
• Finding: The description uses very broad phrases like 'use when creating beautiful, professional-grade user interfaces' and covers color schemes, typography, charts, and UX best practices without clear boundaries. This can cause the orchestrator to invoke the skill for many ordinary product or coding requests, increasing prompt-surface area and creating unnecessary routing or instruction interference even though the content itself is non-malicious.

Natural-Language Policy Violations

Medium

• Confidence: 89% confidence
• Finding: Most of the skill body is written in Chinese and does not indicate that responses or extracted guidance should respect the user's preferred language. This can lead to unwanted language switching, degraded usability, and misinterpretation when the surrounding conversation is in another language; the risk is operational rather than directly security-critical.

Vague Triggers

Medium

• Confidence: 95% confidence
• Finding: The usage section lists trigger conditions such as designing any interface, choosing colors, picking fonts, designing charts, and seeking UX best practices, but it does not define scope limits or negative examples. In an agent setting, this ambiguity can over-trigger the skill on common requests and crowd out more appropriate tools or instructions, which is a real prompt-quality and control issue.

Natural-Language Policy Violations

Medium

• Confidence: 96% confidence
• Finding: This markdown file contains user-facing instructional content exclusively in Chinese, and there is no indication that the skill is region-specific or that users can opt into this language. Under the policy, forcing a specific language without user choice is a natural-language policy violation.

Natural-Language Policy Violations

Medium

• Confidence: 95% confidence
• Finding: This markdown file presents all instructions and examples exclusively in Chinese, which can amount to a language policy violation if users are not given an opt-in choice or informed that the skill is intended for a Chinese-speaking audience. The file does not indicate that the locale restriction is deliberate or region-specific.

Natural-Language Policy Violations

Low

• Confidence: 77% confidence
• Finding: The document explicitly presents the skill in English and Chinese, but the usage examples and structure suggest a built-in bilingual presentation rather than user-selected localization. Under the policy, language constraints should be opt-in or clearly justified; no such opt-in or rationale is provided here.

Natural-Language Policy Violations

Low

• Confidence: 90% confidence
• Finding: This markdown file presents all instructions and descriptions exclusively in Chinese, which can amount to a language/locale policy issue when no user opt-in or justified regional scope is stated. The document does not indicate that it is intended only for a Chinese-speaking audience or provide an alternative language option.

Natural-Language Policy Violations

Low

• Confidence: 91% confidence
• Finding: This markdown file presents all guidance in Chinese and does not provide an alternative language option or state that the content is intended only for Chinese-speaking users. Under the policy rule for language or locale constraints, forcing a specific language without user opt-in can be a natural-language policy violation.

Natural-Language Policy Violations

Low

• Confidence: 92% confidence
• Finding: This markdown file is entirely written in Chinese and presents the skill/reference content in a single language without any indication that users may choose another language. Under the language/locale policy rule, forcing a specific language without opt-in can be a natural-language policy violation when no justification is provided.

Static analysis

No suspicious patterns detected.