opentui
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate documentation for the OpenTUI framework and follows standard software development practices. No malicious instructions or patterns were identified across the 26 files analyzed.- [EXTERNAL_DOWNLOADS]: The skill references several external packages, including @opentui/core, @opentui/react, and @opentui/solid, as well as the create-tui utility. These resources are consistent with the framework's purpose and are hosted on standard registries (Bun/NPM).- [COMMAND_EXECUTION]: The documentation provides standard CLI commands for project scaffolding and building, such as 'bunx create-tui' and 'bun run build'. These are typical for developer-focused tools.- [DATA_EXFILTRATION]: The skill documents support for the OSC 52 terminal protocol, which allows applications to interact with the system clipboard. This is a standard feature for terminal user interfaces used to improve user workflow.- [PROMPT_INJECTION]: The skill documents components designed to render untrusted content from external sources.
- Ingestion points: The MarkdownRenderable component is designed to render streaming content from LLMs.
- Boundary markers: The documentation does not define specific boundary markers for processed data.
- Capability inventory: The framework provides terminal interaction, event handling, and clipboard access via OSC 52.
- Sanitization: The documentation does not specify internal sanitization for rendered markdown or code blocks.
Audit Metadata