tui-link
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill operates as a pure data transformation utility. It takes JSON input describing UI properties and generates ASCII art (TUI_RENDER) and JSON design specifications (COMPONENT_SPEC, PENCIL_SPEC, PENCIL_BATCH_DESIGN).
- [NO_CODE]: There are no scripts, binaries, or executable commands (Python, JavaScript, Shell) included in this skill. All logic is contained within natural language instructions and output templates.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes external data (such as error messages or component properties) and interpolates them into its output, it lacks any high-privilege capabilities such as file system writing, network operations, or command execution that could be exploited via malicious input. The attack surface is minimal and restricted to visual representation.
Audit Metadata