go-tui
Warn
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install the tui CLI and go-tui library from github.com/grindlemire/go-tui. Installing and executing code from external repositories is a sensitive operation.
- [COMMAND_EXECUTION]: The workflow relies on executing shell commands such as tui generate and go run . to compile and execute applications. These commands process project files and run the resulting binaries.
- [REMOTE_CODE_EXECUTION]: The framework uses a code generation step to create Go source files from GSX templates, which are then compiled and executed. This represents a dynamic code execution pattern.
- [PROMPT_INJECTION]: The skill provides patterns for streaming LLM output into terminal views using StreamAbove, which creates an indirect prompt injection surface. Instructions embedded in processed model data could potentially influence the agent's command execution capabilities.
- [NO_CODE]: The skill consists of documentation and reference files without providing any internal scripts or binaries directly.
Audit Metadata