tui-design
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is purely documentation-based and contains no executable code or scripts. It provides legitimate engineering guidance for terminal interface design without any detected malicious patterns or exfiltration attempts.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides defensive guidance for handling potentially untrusted data that could be interpreted by a terminal emulator. It highlights the risk of malicious control sequences in filenames or logs and recommends sanitization.\n
- Ingestion points: Filenames, logs, and remote strings (as identified in
SKILL.md).\n - Boundary markers: Recommends using the framework's supported text and sanitization paths.\n
- Capability inventory: The skill is instructional and does not possess its own execution capabilities.\n
- Sanitization: Recommends escaping control sequences before writing to raw output APIs.
Audit Metadata