bubbletea
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides references to several Go packages from the official
github.com/charmbraceletorganization, which is the standard provider for the Bubble Tea ecosystem. - [COMMAND_EXECUTION]: The documentation describes the use of
tea.ExecProcessandtea.Exec, which are built-in features of the library for temporarily handing control of the terminal to sub-processes (such as launching a text editor like Vim or Nano). - [REMOTE_CODE_EXECUTION]: The skill includes boilerplate code for making HTTP requests (e.g., using
http.Get) to fetch data from external sources, which is a standard pattern for network-enabled TUI applications. - [INDIRECT_PROMPT_INJECTION]: While the skill teaches how to handle user input via
textinputandtextareacomponents, these are presented as standard TUI elements. There is no indication of unsafe handling of untrusted data within the skill's own operations.
Audit Metadata