UI/UX Pro Max

Security checks across malware telemetry and agentic risk

Overview

This UI/UX skill is purpose-aligned and does not show evidence of credential access, persistence, exfiltration, or destructive behavior, though it includes an optional local Python helper and has limited provenance information.

This appears safe for normal UI/UX design assistance. Before installing, note that the publisher/source is not identified and that the optional design-system generator runs local Python code; only run it when needed and review any proposed frontend changes before applying them.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Risk analysis

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

#
ASI05: Unexpected Code Execution
Low
What this means

If the optional helper is run, bundled Python code executes locally to support design-system output.

Why it was flagged

The skill documents an optional local Python script for generating design-system tokens. This is aligned with the skill purpose, but it is still local code execution a user should notice.

Skill content
python3 skills/ui-ux-pro-max/scripts/design_system.py --help
Recommendation

Use the script only when you want structured token generation, and review the generated output before applying it to a project.

#
ASI04: Agentic Supply Chain Vulnerabilities
Info
What this means

Users have less external context for who authored the bundled guidance and helper files.

Why it was flagged

The package lacks a public source or homepage reference. This is a provenance gap, but the provided artifacts and static scan do not show suspicious behavior.

Skill content
Source: unknown; Homepage: none
Recommendation

Prefer installing from trusted publishers, and treat the optional script as third-party local code.