textual-tui

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is a development toolkit and educational resource for the Textual TUI library. It contains legitimate code examples, architectural patterns, and references to official documentation.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install standard, well-known Python packages (textual, textual-dev, psutil) from the official Python Package Index (PyPI). These packages are industry standards for building terminal interfaces and monitoring system performance.
  • [COMMAND_EXECUTION]: The provided example applications, such as dashboard_app.py, use the psutil library to retrieve local system metrics (CPU usage, memory, uptime). These operations are entirely local and consistent with the application's purpose as a system monitor.
  • [INDIRECT_PROMPT_INJECTION]: The DataViewer application in assets/data_viewer.py is designed to read and display JSON and CSV files from the local file system. While this presents a surface for ingesting untrusted data, the application lacks exploitable capabilities such as network exfiltration or shell execution that would allow an injection to escalate into a security threat.
  • [DATA_EXPOSURE_AND_EXFILTRATION]: While the DataViewer example uses DirectoryTree to browse the user's home directory, this is a standard feature for a file browser application. There are no network calls or hidden mechanisms detected that would exfiltrate this data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 04:55 PM