tui-number-box
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a template for formatting text and JSON data. It does not include any scripts, binary files, or commands that interact with the host system, network, or sensitive files.
- [INDIRECT_PROMPT_INJECTION]: The skill processes structured data inputs to generate UI mockups. While it ingests external data, the risk is negligible.
- Ingestion points: The
Input ModelJSON structure defined inSKILL.mdserves as the entry point for data processing. - Boundary markers: The instructions do not define specific delimiters for separating user data from instructions, but the output is restricted to specific Markdown blocks (
TUI_RENDER,COMPONENT_SPEC, etc.). - Capability inventory: The skill has no capabilities for file writing, network communication, or shell command execution.
- Sanitization: The skill instructions do not specify input validation, though it mentions truncating error messages to the TUI width.
Audit Metadata