tuicr
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-generated annotations from 'tuicr' sessions and treats them as instructions for modifying source code.
- Ingestion points: The agent reads review comments using the
tuicr review commentscommand, as described inSKILL.mdandreferences/usage.md. - Boundary markers: Absent. The skill does not define specific delimiters or instructions to prevent the agent from blindly following instructions embedded within the annotation text.
- Capability inventory: The skill allows the use of
Bash,Read,Edit,Write,Grep, andGlobtools, providing the agent with the ability to perform file system modifications and shell command execution based on the processed annotations. - Sanitization: Absent. The workflow instructs the agent to classify and directly "address" the
contentof the annotations without validation or escaping. - [COMMAND_EXECUTION]: The
scripts/launch-tuicr.shscript dynamically constructs and executes shell commands to launch the TUI in external terminal environments like 'herdr' or 'ghostty'. - Evidence: The script assembles a command string including user-supplied arguments and executes it via terminal workspace tools (
herdr pane runorghostty -e). - Context: This mechanism is utilized to provide the 'tuicr' tool with a functional TTY environment, which is not available in the agent's native execution context. The script employs a shell-quoting helper to mitigate injection risks during command assembly.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the 'tuicr' tool from the official nixpkgs registry.
- Evidence:
SKILL.mdandreferences/install.mdprovide instructions for fetching the tool usingnix buildornix runcommands targeting thenixpkgs#tuicrpackage.
Audit Metadata