tui-designer
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several external libraries to achieve terminal effects, including the
tuimorphiccomponent library,crtfilterfor WebGL effects, and theInfernolibrary for SwiftUI shaders. These are standard packages relevant to the skill's primary purpose of UI design. - [INDIRECT_PROMPT_INJECTION]: The provided React and SwiftUI templates include components that ingest and render external data such as logs and system status messages.
- Ingestion points: The
LogViewercomponent intemplates/react-tuimorphic-starter.tsxand thelinesstate array intemplates/swiftui-crt-view.swiftare designed to display dynamic content. - Boundary markers: No specific delimiters or "ignore instructions" warnings are present in the code templates to separate data from potential instructions.
- Capability inventory: The templates are focused on UI presentation and do not contain dangerous capabilities like arbitrary command execution, network exfiltration, or sensitive file access.
- Sanitization: The boilerplate code does not implement sanitization or escaping for the rendered text, leaving the risk of rendering malicious instructions if the source data is untrusted.
- [DYNAMIC_EXECUTION]: The skill includes a standalone Python utility,
scripts/generate_palette.py, which is designed to be executed by the user to generate theme configurations. The script uses standard libraries (colorsys,argparse,json) to perform color calculations and writes the results to the filesystem based on user-specified output paths.
Audit Metadata