tailrocks-tui-design
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill defines a strictly limited scope for TUI design, explicitly prohibiting the development of application logic, I/O operations, or business state, which effectively minimizes the potential attack surface.
- [SAFE]: Comprehensive security guidelines are provided in
references/runtime-trust.mdandSKILL.md, which instruct the agent to disregard embedded instructions in untrusted data and to cite the location of secrets rather than exposing their values. - [SAFE]: The Rust templates (e.g.,
main.rs) implement sophisticated file system safety mechanisms, including platform-specific atomic renames, directory identity verification, and preimage hash checks to prevent race conditions, symlink attacks, or unauthorized file mutations. - [SAFE]: The
registry.rstemplate includes input validation for screen and state identifiers, enforcing strict character sets and length limits to prevent path traversal or other injection-based file naming vulnerabilities.
Audit Metadata