tui-loading-popup
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill instructions are limited to providing design specifications and ASCII rendering logic. No evidence of obfuscation, hidden payloads, or suspicious command execution was found.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted design data via a JSON input model (Ingestion Point). It defines rigid boundaries through mandatory output blocks (Boundary Markers). The skill possesses zero dangerous capabilities (Capability Inventory), such as tool execution, shell access, or network requests, which ensures that even if malicious instructions were present in the input data, they could not be executed by the skill.
Audit Metadata