textual-builder

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill consists of documentation and a starter template for the Textual library.\n
  • The provided Python code in assets/card-game-template/app.py and documentation in references/ use standard framework patterns for UI construction and event handling.\n
  • No unauthorized network requests, sensitive file access, or privilege escalation commands were found.\n- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the textual package via pip or uv.\n
  • Textual is a well-known and trusted TUI framework.\n
  • All external links point to the official Textual documentation and repository.\n- [INDIRECT_PROMPT_INJECTION]: The skill documents how to handle user input via Input widgets and key bindings.\n
  • This represents a standard UI attack surface where untrusted user input enters the application context, but the skill itself does not provide insecure processing logic for this data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 11:45 AM