tui-rate
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or behaviors were detected. The skill is designed to produce ASCII TUI and structured JSON data for design workflows.
- [PROMPT_INJECTION]: Indirect Prompt Injection Analysis:
- Ingestion points: The skill accepts parameters through a JSON-based 'Input Model' in
SKILL.md. - Boundary markers: No specific delimiters or 'ignore' instructions are provided for processed data.
- Capability inventory: The skill generates DSL commands (
G,I,U) for the Pencil MCP drawing tool. - Sanitization: No sanitization logic is defined for the interpolated properties.
- Conclusion: This represents an architectural observation of the input-output mapping process common in UI generation skills.
Audit Metadata