tui-designer

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references several external libraries to achieve terminal effects, including the tuimorphic component library, crtfilter for WebGL effects, and the Inferno library for SwiftUI shaders. These are standard packages relevant to the skill's primary purpose of UI design.
  • [INDIRECT_PROMPT_INJECTION]: The provided React and SwiftUI templates include components that ingest and render external data such as logs and system status messages.
  • Ingestion points: The LogViewer component in templates/react-tuimorphic-starter.tsx and the lines state array in templates/swiftui-crt-view.swift are designed to display dynamic content.
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are present in the code templates to separate data from potential instructions.
  • Capability inventory: The templates are focused on UI presentation and do not contain dangerous capabilities like arbitrary command execution, network exfiltration, or sensitive file access.
  • Sanitization: The boilerplate code does not implement sanitization or escaping for the rendered text, leaving the risk of rendering malicious instructions if the source data is untrusted.
  • [DYNAMIC_EXECUTION]: The skill includes a standalone Python utility, scripts/generate_palette.py, which is designed to be executed by the user to generate theme configurations. The script uses standard libraries (colorsys, argparse, json) to perform color calculations and writes the results to the filesystem based on user-specified output paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 04:46 PM