atscript-ui-tables

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The framework allows for dynamic styling and attribute assignment via @ui.table.fn.* annotations, as described in references/cells.md. These expressions are evaluated at runtime using the @atscript/ui-fns package within a specialized sandbox. This capability is used to derive UI properties from row data and table state.
  • [EXTERNAL_DOWNLOADS]: The skill requires several Node.js dependencies from the @atscript NPM scope, as listed in SKILL.md. Installation instructions point to official vendor packages maintained by moostjs. These resources are necessary for the core functionality of the table components.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external API endpoints specified by the user via props like url or queryFn (documented in references/query.md). As this data is rendered within the agent's context, there is an inherent risk that untrusted data from the backend could contain malicious instructions. The skill relies on Vue's standard template escaping and internal cell formatting functions to mitigate direct rendering risks.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 10:44 AM