textual-tui
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a development toolkit and educational resource for the Textual TUI library. It contains legitimate code examples, architectural patterns, and references to official documentation.
- [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install standard, well-known Python packages (
textual,textual-dev,psutil) from the official Python Package Index (PyPI). These packages are industry standards for building terminal interfaces and monitoring system performance. - [COMMAND_EXECUTION]: The provided example applications, such as
dashboard_app.py, use thepsutillibrary to retrieve local system metrics (CPU usage, memory, uptime). These operations are entirely local and consistent with the application's purpose as a system monitor. - [INDIRECT_PROMPT_INJECTION]: The
DataViewerapplication inassets/data_viewer.pyis designed to read and display JSON and CSV files from the local file system. While this presents a surface for ingesting untrusted data, the application lacks exploitable capabilities such as network exfiltration or shell execution that would allow an injection to escalate into a security threat. - [DATA_EXPOSURE_AND_EXFILTRATION]: While the
DataViewerexample usesDirectoryTreeto browse the user's home directory, this is a standard feature for a file browser application. There are no network calls or hidden mechanisms detected that would exfiltrate this data.
Audit Metadata