skills/ai4rpg/tavern-cards/tavern-ui/Gen Agent Trust Hub

tavern-ui

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a development template repository from GitHub (github.com/StageDog/tavern_helper_template) and install packages using pnpm. These resources are hosted on well-known platforms and are integral to the stated development purpose.
  • [DYNAMIC_EXECUTION]: The skill uses jQuery.load() to dynamically fetch and render HTML/JavaScript components from a local development server or a public CDN (jsdelivr). This is the standard mechanism for the SillyTavern extension system it supports.
  • [COMMAND_EXECUTION]: The skill includes instructions for running standard development commands like git clone, pnpm build, and npx vue-tsc for static type checking. These commands are executed by the user in a local terminal context for building the UI assets.
  • [INDIRECT_PROMPT_INJECTION]: The UI components process chat message data for rendering and interaction. The skill implements several safety measures:
  • Ingestion points: Data is read via getChatMessages in SKILL.md.
  • Boundary markers: The skill uses a dedicated defineMvuDataStore and zod schemas (schema.ts) to validate data structures.
  • Capability inventory: Capabilities include UI rendering within isolated iframes and interaction with specific extension APIs (triggerSlash, createChatMessages) for game logic.
  • Sanitization: Strict zod schema parsing and normalization are used to ensure data integrity before the UI consumes it.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 03:07 PM