tui-input
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a static set of instructions and templates for generating text-based UI mockups and JSON design metadata. It does not include any executable scripts, binary files, or network-enabled commands.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process component properties such as labels, placeholders, and user-provided values which could contain malicious instructions.
- Ingestion points: Component properties and model values defined in the 'Input Model' and 'Component Mapping' sections of SKILL.md.
- Boundary markers: The output is strictly formatted within Markdown code blocks using specific headers (TUI_RENDER, COMPONENT_SPEC, etc.).
- Capability inventory: No capabilities for command execution, file system interaction, or network access are present in the skill.
- Sanitization: While no explicit sanitization is described, the lack of underlying tool access or execution capabilities prevents the escalation of indirect prompt injection into a functional exploit.
Audit Metadata