charm-tui
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and upgrade guides from the official
charm.landdomain andgithub.com/charmbraceletrepositories. These are well-known resources for the Go terminal UI ecosystem and are used for reference purposes. - [COMMAND_EXECUTION]: Provides instructions for using standard library functions like
tea.ExecProcessto launch external editors (e.g., vim) andtmuxfor capturing terminal output during testing. These are documented as part of normal TUI development workflows. - [INDIRECT_PROMPT_INJECTION]: Documentation includes components for ingesting external data via the clipboard (
tea.ReadClipboard) and file selection (huh.NewFilePicker). While these represent a potential attack surface for the resulting applications, they are standard features of the library stack and are presented with architectural guidance for message handling and state management.
Audit Metadata