tdesign-miniprogram

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the tdesign-miniprogram UI library via npm and lists dev-tool dependencies like FastAPI and uvicorn in its reference documentation.
  • [COMMAND_EXECUTION]: Documentation includes standard CLI commands for project setup, dependency management, and local API testing using npm install, npm run dev, and curl.
  • [SAFE]: No malicious behavior or data exfiltration attempts were found. Technical implementations such as Base64 encoding for embedded fonts and HTML escaping for chat content are aligned with standard secure development practices.
  • [PROMPT_INJECTION]: The skill's components for AI chat interfaces include rendering logic for external content, but no direct prompt injection vulnerabilities or bypass attempts were found in the instructions themselves.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 07:46 PM
Security Audit — agent-trust-hub — tdesign-miniprogram