tavern-ui
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to clone a development template repository from GitHub (
github.com/StageDog/tavern_helper_template) and install packages usingpnpm. These resources are hosted on well-known platforms and are integral to the stated development purpose. - [DYNAMIC_EXECUTION]: The skill uses
jQuery.load()to dynamically fetch and render HTML/JavaScript components from a local development server or a public CDN (jsdelivr). This is the standard mechanism for the SillyTavern extension system it supports. - [COMMAND_EXECUTION]: The skill includes instructions for running standard development commands like
git clone,pnpm build, andnpx vue-tscfor static type checking. These commands are executed by the user in a local terminal context for building the UI assets. - [INDIRECT_PROMPT_INJECTION]: The UI components process chat message data for rendering and interaction. The skill implements several safety measures:
- Ingestion points: Data is read via
getChatMessagesinSKILL.md. - Boundary markers: The skill uses a dedicated
defineMvuDataStoreand zod schemas (schema.ts) to validate data structures. - Capability inventory: Capabilities include UI rendering within isolated iframes and interaction with specific extension APIs (
triggerSlash,createChatMessages) for game logic. - Sanitization: Strict zod schema parsing and normalization are used to ensure data integrity before the UI consumes it.
Audit Metadata