tesseract-editor
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The references/installation.md file provides instructions to download CLI bundles and checksums from the official Mirage-HQ GitHub repository (github.com/mirage-hq/tesseract/releases).
- [COMMAND_EXECUTION]: The installation guide includes commands for verifying checksums, extracting archives, and running installation scripts (install.sh on Unix-like systems, install.ps1 on Windows) to set up the Tesseract CLI tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external .tsrct project files. * Ingestion points: examples/timeline-editor/app.js and examples/bouncing-ball/app.js ingest files via TesseractEngine.create. * Boundary markers: No explicit prompt boundary markers are used when loading project data. * Capability inventory: The editor is capable of writing to the file system (via File System Access API), playing audio, and rendering to canvas. * Sanitization: Project files are parsed and validated by the WASM-based Tesseract engine.
Audit Metadata