atscript-ui-tables
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The framework allows for dynamic styling and attribute assignment via
@ui.table.fn.*annotations, as described inreferences/cells.md. These expressions are evaluated at runtime using the@atscript/ui-fnspackage within a specialized sandbox. This capability is used to derive UI properties from row data and table state. - [EXTERNAL_DOWNLOADS]: The skill requires several Node.js dependencies from the
@atscriptNPM scope, as listed inSKILL.md. Installation instructions point to official vendor packages maintained by moostjs. These resources are necessary for the core functionality of the table components. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from external API endpoints specified by the user via props like
urlorqueryFn(documented inreferences/query.md). As this data is rendered within the agent's context, there is an inherent risk that untrusted data from the backend could contain malicious instructions. The skill relies on Vue's standard template escaping and internal cell formatting functions to mitigate direct rendering risks.
Audit Metadata