tui-changelog
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary purpose is to generate ASCII Text UI (TUI) and JSON-based design specifications for a changelog component. No malicious patterns or security risks were identified.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured JSON input to generate its outputs. While there are no explicit boundary markers for the input data, the skill acts as a static templating engine with no internal capabilities to execute system commands or perform network operations, resulting in a minimal attack surface.
- [REMOTE_CODE_EXECUTION]: The PENCIL_BATCH_DESIGN output uses a domain-specific language (e.g.,
G(),I(),U()) intended for consumption by a separate Pencil MCP tool. This output is treated as data for an external tool and does not involve the skill itself executing remote code or scripts.
Audit Metadata