tui-page-composer
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides structured instructions and examples for UI layout composition. It does not include executable scripts, shell commands, or network-enabled code.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an interface for processing external design specifications via JSON inputs (SKILL.md). While this creates a potential surface for indirect prompt injection if the input contains malicious instructions, the risk is inherent to the skill's primary function of data transformation. The skill lacks explicit boundary markers or sanitization steps, but its operations are restricted to the context of UI design and specialized design tools.
Audit Metadata