Ui Ux Toolkit Free

• Outcome: Pass
• Latest audit: Jul 22, 2026 · 1:39 PM UTC
• Version: 1.0.0

Overview

This skill is a design-assistance guide that asks agents to run local search commands, with no evidence of hidden data access, persistence, credential use, or destructive behavior.

Before installing, confirm the package actually includes the referenced scripts/search.py and review any command before running it, especially the Python installation examples that use system package managers or sudo.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Tool Misuse: Tool Parameter Abuse, Chaining Abuse, Unsafe Defaults
• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration

Findings (4)

Missing User Warnings

Medium

• Confidence: 92% confidence
• Finding: The skill explicitly allows the exec tool and repeatedly instructs the agent to run local Python commands, but it does not warn users that this causes local command execution. In an agent setting, that increases the risk of unsafe execution from unreviewed skill content or user prompts, especially when the referenced scripts are not shown or validated here.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

brew install python3

# Ubuntu/Debian
sudo apt update && sudo apt install python3

# Windows
winget install Python.Python.3.12

• Confidence: 97% confidence
• Finding: This duplicate finding points to the same sudo-based privileged command sequence. The risk is the same: if an agent executes or recommends privilege escalation as routine setup, it can cause unintended system modifications and magnify any downstream command risk.

Sudo/Root Execution

Medium

• Category: Privilege Escalation

Content

brew install python3

# Ubuntu/Debian
sudo apt update && sudo apt install python3

# Windows
winget install Python.Python.3.12

• Confidence: 97% confidence
• Finding: This duplicate finding points to the same sudo-based privileged command sequence. The risk is the same: if an agent executes or recommends privilege escalation as routine setup, it can cause unintended system modifications and magnify any downstream command risk.

Chaining Abuse

High

• Category: Tool Misuse

Content

brew install python3

# Ubuntu/Debian
sudo apt update && sudo apt install python3

# Windows
winget install Python.Python.3.12

• Confidence: 94% confidence
• Finding: The chained command 'sudo apt update && sudo apt install python3' combines multiple privileged operations in one step, which is dangerous in an exec-capable agent context because it reduces opportunities for review and compounds the effect of a single execution. Chaining privileged commands can make accidental or automated execution more harmful and harder to interrupt safely.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.