react-ink
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The
SKILL.mdfile includes an instruction that directs the agent to prefix its first response with a specific emoji (๐งข) when the skill is activated. This is a behavioral override used for visual confirmation of activation. - [COMMAND_EXECUTION]: The
references/patterns.mdfile provides a standard code pattern for using the Node.jschild_process.spawnmodule to capture and display stdout from subprocesses. This is documented as a feature for building terminal dashboards and logs. - [EXTERNAL_DOWNLOADS]: The skill recommends the installation of various well-known NPM packages from the React and Ink ecosystems, including the core
inklibrary and community components like@inkjs/ui,ink-spinner, andink-text-input.
Audit Metadata