tui-lazy-load
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill operates entirely within the context of text and JSON transformation. It does not perform network operations, access sensitive files, or execute external code.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data via an input model (JSON) containing properties such as 'props' and 'state'. While these fields could theoretically carry malicious instructions, the skill functions strictly as a renderer, and there is no evidence of capability-rich tool chaining that would enable an exploit. The absence of explicit boundary markers is noted but does not escalate the verdict for this use case.
Audit Metadata