textual-tui-skill
Warn
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation provides instructions to use
curlandgit cloneto retrieve files from a third-party GitHub repository (aperepel/textual-tui-skill) which is not an established or trusted vendor. - [REMOTE_CODE_EXECUTION]: The installation guide explicitly directs the user to run
bash quickstart.shfrom the cloned repository. Executing scripts from unverified community sources can lead to the execution of malicious code on the local system. - [COMMAND_EXECUTION]: The skill includes shell commands designed to modify the local environment, specifically targeting the installation of a skill file into the
~/.agents/skills/directory via external network requests.
Audit Metadata