terminal-ui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown documentation and code examples for educational purposes. No executable scripts are included that could compromise the environment, and the documentation promotes industry-standard best practices for TUI development.
- [EXTERNAL_DOWNLOADS]: The documentation references and encourages the use of well-known open-source libraries such as Ink and Clack, as well as established design guidelines like clig.dev. These references to official GitHub repositories and reputable community resources are for instructional use and do not involve untrusted or malicious sources.
- [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses potential injection surfaces by providing robust patterns for handling user input in CLI applications. It includes specific guidance on input validation, length checks, and regex filtering to ensure that user data is handled safely.
- Ingestion points: User input ingestion is handled via the
useInputhook and@clack/promptscomponents as described inreferences/input-useinput-hook.mdandreferences/prompt-group-flow.md. - Boundary markers: The skill encourages the implementation of
validatefunctions and early exit patterns to delimit user input from application logic. - Capability inventory: The examples describe UI component rendering, standard terminal interactions, and process lifecycle management.
- Sanitization: Practical examples in
references/prompt-validation.mddemonstrate the use of regex and character limit checks for sanitizing external input.
Audit Metadata