skills/xobotyi/cc-foundry/charm-tui/Gen Agent Trust Hub

charm-tui

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references documentation and upgrade guides from the official charm.land domain and github.com/charmbracelet repositories. These are well-known resources for the Go terminal UI ecosystem and are used for reference purposes.
  • [COMMAND_EXECUTION]: Provides instructions for using standard library functions like tea.ExecProcess to launch external editors (e.g., vim) and tmux for capturing terminal output during testing. These are documented as part of normal TUI development workflows.
  • [INDIRECT_PROMPT_INJECTION]: Documentation includes components for ingesting external data via the clipboard (tea.ReadClipboard) and file selection (huh.NewFilePicker). While these represent a potential attack surface for the resulting applications, they are standard features of the library stack and are presented with architectural guidance for message handling and state management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 10:15 PM
Security Audit — agent-trust-hub — charm-tui