{"data":{"skill":{"slug":"shubhamsaboo-ux-designer","name":"ux-designer","icon":"📦","repo":"https://github.com/shubhamsaboo/awesome-llm-apps/tree/main/awesome_agent_skills/ux-designer","status":"approved","author":"shubhamsaboo","authorVersion":"1.1.0","skillstoreRevision":1},"audit":{"id":"ed731ee4-a69b-4ccc-b53c-6203a5c9c656","skill_id":"57923c26-b967-492f-b284-9de380ae2e8a","version":2,"content_hash":"v3:412e23e39ccd9729546286287b96bb41707397cf:26bea3bb64f08a3e60d9dfe1d06ab8529e25e862270ad5e0a39b8a5429eda162:6a6f91b5a5e8deb3fbb8502ecf229ff10843b75736575e41647b19ede672e85a:736b696c6c732f7368756268616d7361626f6f2f75782d64657369676e6572:d5c918421b917275958b57b23970497e","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All static findings were adjudicated as false positives. The apparent command execution patterns are Markdown backticks and fenced templates, and the reconnaissance matches are UX guidance examples rather than system inspection instructions.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":33,"line_start":33},{"file":"SKILL.md","line_end":38,"line_start":38},{"file":"SKILL.md","line_end":102,"line_start":85},{"file":"SKILL.md","line_end":106,"line_start":102},{"file":"SKILL.md","line_end":121,"line_start":106},{"file":"SKILL.md","line_end":125,"line_start":121},{"file":"SKILL.md","line_end":144,"line_start":125},{"file":"SKILL.md","line_end":179,"line_start":144},{"file":"SKILL.md","line_end":186,"line_start":179},{"file":"SKILL.md","line_end":194,"line_start":186}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":7,"total_lines":715,"audit_model":"codex","audited_at":"2026-07-07T03:12:06.906+00:00","created_at":"2026-07-15T09:07:25.355766+00:00","static_findings":[{"id":"blocker:AGENTS.md:13:system-reconnaissance","file":"AGENTS.md","pattern":"System reconnaissance","snippet":"- Use open-ended questions: *\"Walk me through the last time you [did the task]\"*","category":"blocker","line_end":13,"severity":"low","line_start":13},{"id":"blocker:AGENTS.md:98:system-reconnaissance","file":"AGENTS.md","pattern":"System reconnaissance","snippet":"- **Spacing:** 8px base grid applied consistently","category":"blocker","line_end":98,"severity":"low","line_start":98},{"id":"blocker:rules/accessibility.md:43:system-reconnaissance","file":"rules/accessibility.md","pattern":"System reconnaissance","snippet":"- Avoid hover-only interactions (no hover on touch devices)","category":"blocker","line_end":43,"severity":"low","line_start":43},{"id":"blocker:rules/accessibility.md:58:system-reconnaissance","file":"rules/accessibility.md","pattern":"System reconnaissance","snippet":"- Avoid culturally specific metaphors or color meanings","category":"blocker","line_end":58,"severity":"low","line_start":58},{"id":"blocker:rules/interaction-design.md:29:system-reconnaissance","file":"rules/interaction-design.md","pattern":"System reconnaissance","snippet":"- Preserve all valid input — never clear the form on error","category":"blocker","line_end":29,"severity":"low","line_start":29},{"id":"blocker:rules/interaction-design.md:49:system-reconnaissance","file":"rules/interaction-design.md","pattern":"System reconnaissance","snippet":"- Avoid generic labels: \"Submit\", \"OK\", \"Click Here\"","category":"blocker","line_end":49,"severity":"low","line_start":49},{"id":"blocker:rules/interaction-design.md:54:system-reconnaissance","file":"rules/interaction-design.md","pattern":"System reconnaissance","snippet":"- Be specific: \"Password must be at least 8 characters\" not \"Invalid input\"","category":"blocker","line_end":54,"severity":"low","line_start":54},{"id":"blocker:rules/interaction-design.md:71:system-reconnaissance","file":"rules/interaction-design.md","pattern":"System reconnaissance","snippet":"| Form error | Invalid | Enter a valid email address (e.g., name@example.com) |","category":"blocker","line_end":71,"severity":"low","line_start":71},{"id":"blocker:rules/interaction-design.md:78:system-reconnaissance","file":"rules/interaction-design.md","pattern":"System reconnaissance","snippet":"- Missing feedback after the final action (did it work?)","category":"blocker","line_end":78,"severity":"low","line_start":78},{"id":"blocker:rules/research.md:37:system-reconnaissance","file":"rules/research.md","pattern":"System reconnaissance","snippet":"| \"Walk me through the last time you [did the task].\" | \"Don't you think this feature would be usefu","category":"blocker","line_end":37,"severity":"low","line_start":37},{"id":"blocker:rules/research.md:39:system-reconnaissance","file":"rules/research.md","pattern":"System reconnaissance","snippet":"| \"What did you try before finding this solution?\" | \"Do you like this design?\" (opinion, not behavi","category":"blocker","line_end":39,"severity":"low","line_start":39},{"id":"blocker:rules/visual-design.md:8:system-reconnaissance","file":"rules/visual-design.md","pattern":"System reconnaissance","snippet":"Visual design communicates hierarchy, establishes brand consistency, and guides user attention — wit","category":"blocker","line_end":8,"severity":"low","line_start":8},{"id":"blocker:rules/visual-design.md:33:system-reconnaissance","file":"rules/visual-design.md","pattern":"System reconnaissance","snippet":"- Align to a consistent grid (8px base unit is standard)","category":"blocker","line_end":33,"severity":"low","line_start":33},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"This skill contains **detailed rules** in the `rules/` directory, organized by category and priority","category":"external_commands","line_end":33,"severity":"medium","line_start":33},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"2. **Reference specific rules** from `rules/` directory for deep dives","category":"external_commands","line_end":38,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":102,"severity":"medium","line_start":85},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":106,"severity":"medium","line_start":102},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":121,"severity":"medium","line_start":106},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":125,"severity":"medium","line_start":121},{"id":"external_commands:SKILL.md:125:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```markdown","category":"external_commands","line_end":144,"severity":"medium","line_start":125},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":179,"severity":"medium","line_start":144},{"id":"external_commands:SKILL.md:179:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":186,"severity":"medium","line_start":179},{"id":"external_commands:SKILL.md:186:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":194,"severity":"medium","line_start":186},{"id":"blocker:SKILL.md:67:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- Create low → mid → high-fidelity wireframes","category":"blocker","line_end":67,"severity":"low","line_start":67},{"id":"blocker:SKILL.md:193:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"- [ ] Error messages are descriptive: *\"Workspace name must be 3-50 characters\"* not *\"Invalid input","category":"blocker","line_end":193,"severity":"low","line_start":193},{"id":"blocker:SKILL.md:211:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"| Visual Design | ✅ Apply | F-pattern layout, single CTA per screen, 8px grid |","category":"blocker","line_end":211,"severity":"low","line_start":211}],"finding_verdicts":[{"id":"blocker:AGENTS.md:13:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:AGENTS.md:98:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/accessibility.md:43:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/accessibility.md:58:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/interaction-design.md:29:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/interaction-design.md:49:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/interaction-design.md:54:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/interaction-design.md:71:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/interaction-design.md:78:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/research.md:37:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/research.md:39:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/visual-design.md:8:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:rules/visual-design.md:33:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"external_commands:SKILL.md:33:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:85:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:102:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:106:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:121:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:125:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:144:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:179:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"external_commands:SKILL.md:186:ruby-shell-backtick-execution","reason":"The flagged text is Markdown formatting, an inline path, or a fenced example block in SKILL.md. It does not execute shell commands or instruct the agent to run external programs.","verdict":"false_positive","confidence":0.96},{"id":"blocker:SKILL.md:67:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:193:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94},{"id":"blocker:SKILL.md:211:system-reconnaissance","reason":"The flagged text is UX design guidance or example interface copy, not host reconnaissance or security bypass behavior. No instruction asks the agent to inspect system state or collect environment details.","verdict":"false_positive","confidence":0.94}],"semantic_findings":[],"subject_marketplace_commit_sha":"412e23e39ccd9729546286287b96bb41707397cf","subject_content_hash":"26bea3bb64f08a3e60d9dfe1d06ab8529e25e862270ad5e0a39b8a5429eda162","subject_tree_hash":"6a6f91b5a5e8deb3fbb8502ecf229ff10843b75736575e41647b19ede672e85a","subject_plugin_path":"skills/shubhamsaboo/ux-designer","audit_payload_hash":"d5c918421b917275958b57b23970497e","confirmed_risk_level":null,"scanner_version":null,"policy_version":null,"subject":{"marketplaceCommitSha":"412e23e39ccd9729546286287b96bb41707397cf","contentHash":"26bea3bb64f08a3e60d9dfe1d06ab8529e25e862270ad5e0a39b8a5429eda162","treeHash":"6a6f91b5a5e8deb3fbb8502ecf229ff10843b75736575e41647b19ede672e85a","pluginPath":"skills/shubhamsaboo/ux-designer","auditPayloadHash":"d5c918421b917275958b57b23970497e"},"scannerVersion":null,"policyVersion":null},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"not_attestable","url":null,"status":null,"reason":"confirmed_risk_level does not match the canonical trust resolver"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"not_attestable","verificationState":"not_verified"},"isLatest":true}}