textual-builder
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and a starter template for the Textual library.\n
- The provided Python code in
assets/card-game-template/app.pyand documentation inreferences/use standard framework patterns for UI construction and event handling.\n - No unauthorized network requests, sensitive file access, or privilege escalation commands were found.\n- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
textualpackage viapiporuv.\n - Textual is a well-known and trusted TUI framework.\n
- All external links point to the official Textual documentation and repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents how to handle user input via
Inputwidgets and key bindings.\n - This represents a standard UI attack surface where untrusted user input enters the application context, but the skill itself does not provide insecure processing logic for this data.
Audit Metadata