terminal-ui

Warn

Audited by Runlayer on Feb 21, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
48
Flagged
48
Chunks
48
Flagged Files (48)
AGENTS.mdHIGH
78.3%

Malicious tool definition detected

Tool: AGENTS.md Description: # Developer Experience TUI **Version 0.1.0** DevEx January 2026 > **Note:** > This document is mainly for agents and LLMs to follow when maintaining, > generating, or refactoring codebases.

README.mdHIGH
78.3%

Malicious tool definition detected

Tool: README.md Description: # Developer Experience TUI Best Practices Comprehensive developer experience guide for building TypeScript terminal user interfaces using Ink (React for CLIs), @clack/prompts, and @clack/core.

SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: terminal-ui description: Terminal User Interface (TUI) performance and UX guidelines for TypeScript applications using Ink and Clack.

assets/templates/_template.mdHIGH
78.3%

Malicious tool definition detected

Tool: assets/templates/_template.md Description: --- title: Rule Title Here impact: CRITICAL|HIGH|MEDIUM-HIGH|MEDIUM|LOW-MEDIUM|LOW impactDescription: Brief quantified impact (e.g., "2-10× improvement", "200ms savings") tags: prefix, keyword1, keyword2 --- ## Rule Title Here Brief explanation of WHY this matters (1-3 sentences).

metadata.jsonHIGH
78.3%

Malicious tool definition detected

Tool: metadata.json Description: { "version": "1.1.1", "organization": "DevEx", "technology": "Developer Experience TUI", "date": "January 2026", "abstract": "Comprehensive developer experience guide for building TypeScript terminal user interfaces using Ink (React for CLIs) and Clack prompts.

references/_sections.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/_sections.md Description: # Sections This file defines all sections, their ordering, impact levels, and descriptions.

references/input-escape-routes.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/input-escape-routes.md Description: --- title: Always Provide Escape Routes impact: CRITICAL impactDescription: prevents user frustration and stuck states tags: input, escape, ctrl-c, exit, ux --- ## Always Provide Escape Routes Ensure users can always exit or cancel operations.

references/input-immediate-feedback.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/input-immediate-feedback.md Description: --- title: Provide Immediate Visual Feedback for Input impact: CRITICAL impactDescription: <100ms response feels instant tags: input, feedback, latency, ux, responsiveness --- ## Provide Immediate Visual Feedback for Input Respond to user input within 100ms.

references/input-isactive-focus.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/input-isactive-focus.md Description: --- title: Use isActive Option for Focus Management impact: HIGH impactDescription: prevents input conflicts between components tags: input, focus, isactive, components, ink --- ## Use isActive Option for Focus Management Use the `isActive` option with `useInput` to enable/disable input handling based on focus state.

references/input-modifier-keys.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/input-modifier-keys.md Description: --- title: Handle Modifier Keys Correctly impact: CRITICAL impactDescription: prevents missed shortcuts and input bugs tags: input, modifiers, ctrl, shift, alt, keyboard --- ## Handle Modifier Keys Correctly Check modifier key states explicitly using the key object properties.

references/input-useinput-hook.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/input-useinput-hook.md Description: --- title: Use useInput Hook for Keyboard Handling impact: CRITICAL impactDescription: prevents raw stdin complexity tags: input, useinput, keyboard, ink, hooks --- ## Use useInput Hook for Keyboard Handling Use Ink's `useInput` hook instead of manually handling stdin.

references/prompt-cancellation.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/prompt-cancellation.md Description: --- title: Handle Cancellation Gracefully with isCancel impact: MEDIUM-HIGH impactDescription: prevents crashes and ensures clean exit tags: prompt, cancel, iscancel, clack, exit --- ## Handle Cancellation Gracefully with isCancel Always check for cancellation using `isCancel()` after prompts.

references/prompt-custom-render.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/prompt-custom-render.md Description: --- title: Build Custom Prompts with @clack/core impact: MEDIUM impactDescription: enables specialized input patterns tags: prompt, custom, core, clack, render --- ## Build Custom Prompts with @clack/core Use `@clack/core` to create custom prompts with full control over rendering and behavior when built-in prompts don't fit your needs.

references/prompt-group-flow.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/prompt-group-flow.md Description: --- title: Use Clack group() for Multi-Step Prompts impact: MEDIUM-HIGH impactDescription: enables sequential prompts with shared state tags: prompt, group, clack, flow, sequential --- ## Use Clack group() for Multi-Step Prompts Use `p.group()` to chain related prompts together.

references/prompt-spinner-tasks.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/prompt-spinner-tasks.md Description: --- title: Use Spinner and Tasks for Long Operations impact: MEDIUM-HIGH impactDescription: prevents perceived hang during async work tags: prompt, spinner, tasks, async, progress --- ## Use Spinner and Tasks for Long Operations Show spinners or progress tasks for operations longer than 1 second.

references/prompt-validation.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/prompt-validation.md Description: --- title: Validate Input Early with Descriptive Messages impact: MEDIUM-HIGH impactDescription: prevents invalid data from propagating tags: prompt, validation, error, ux, clack --- ## Validate Input Early with Descriptive Messages Validate user input immediately with clear, actionable error messages.

references/render-60fps-baseline.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/render-60fps-baseline.md Description: --- title: Target 60fps for Smooth Animation impact: CRITICAL impactDescription: 16ms frame budget for perceived smoothness tags: render, animation, framerate, performance, timing --- ## Target 60fps for Smooth Animation Use 60fps (16.67ms per frame) as the baseline for terminal animations.

references/render-escape-sequence-batching.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/render-escape-sequence-batching.md Description: --- title: Defer ANSI Escape Code Generation to Final Output impact: HIGH impactDescription: reduces intermediate string allocations tags: render, ansi, escape-codes, performance, optimization --- ## Defer ANSI Escape Code Generation to Final Output Build content using semantic representations (segments with styles) and convert to ANSI escape codes only at the final output stage.

references/render-overwrite-dont-clear.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/render-overwrite-dont-clear.md Description: --- title: Overwrite Content Instead of Clear and Redraw impact: CRITICAL impactDescription: eliminates blank frame flicker tags: render, flicker, overwrite, animation, performance --- ## Overwrite Content Instead of Clear and Redraw Overwrite terminal content in place rather than clearing the screen first.

references/render-partial-updates.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/render-partial-updates.md Description: --- title: Update Only Changed Regions impact: CRITICAL impactDescription: reduces bandwidth by 80-95% tags: render, partial, optimization, diff, performance --- ## Update Only Changed Regions Update only the terminal regions that changed rather than redrawing the entire screen.

references/render-single-write.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/render-single-write.md Description: --- title: Batch Terminal Output in Single Write impact: CRITICAL impactDescription: eliminates partial frame flicker tags: render, flicker, batching, stdout, performance --- ## Batch Terminal Output in Single Write Write new content to stdout in a single operation.

references/render-synchronized-output.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/render-synchronized-output.md Description: --- title: Use Synchronized Output Protocol for Animations impact: CRITICAL impactDescription: eliminates 100% of mid-frame flicker tags: render, sync, animation, protocol, decset --- ## Use Synchronized Output Protocol for Animations Use the Synchronized Output protocol (DECSET 2026) to signal frame boundaries.

references/robust-exit-codes.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/robust-exit-codes.md Description: --- title: Use Meaningful Exit Codes impact: LOW-MEDIUM impactDescription: enables proper error handling in scripts tags: robust, exit, codes, scripting, automation --- ## Use Meaningful Exit Codes Return appropriate exit codes for different outcomes.

references/robust-graceful-degradation.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/robust-graceful-degradation.md Description: --- title: Degrade Gracefully for Limited Terminals impact: LOW-MEDIUM impactDescription: maintains usability in 100% of terminal environments tags: robust, degradation, compatibility, ssh, terminal --- ## Degrade Gracefully for Limited Terminals Detect terminal capabilities and fall back gracefully.

references/robust-signal-handling.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/robust-signal-handling.md Description: --- title: Handle Process Signals Gracefully impact: LOW-MEDIUM impactDescription: enables clean shutdown and resource cleanup tags: robust, signals, sigint, sigterm, cleanup --- ## Handle Process Signals Gracefully Handle SIGINT (Ctrl+C) and SIGTERM for graceful shutdown.

references/robust-terminal-restore.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/robust-terminal-restore.md Description: --- title: Always Restore Terminal State on Exit impact: LOW-MEDIUM impactDescription: prevents broken terminal after crashes tags: robust, terminal, restore, cleanup, raw-mode --- ## Always Restore Terminal State on Exit Restore terminal settings (cursor visibility, raw mode, alternate screen) before exit.

references/robust-tty-detection.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/robust-tty-detection.md Description: --- title: Detect TTY and Adjust Behavior Accordingly impact: LOW-MEDIUM impactDescription: prevents 100% of CI hangs from interactive prompts tags: robust, tty, detection, ci, automation --- ## Detect TTY and Adjust Behavior Accordingly Check if stdin/stdout are TTYs and adjust behavior.

references/tuicfg-env-vars.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicfg-env-vars.md Description: --- title: Support Standard Environment Variables impact: MEDIUM impactDescription: enables scripting and CI integration tags: tuicfg, environment, variables, ci, automation --- ## Support Standard Environment Variables Respect common environment variables like `NO_COLOR`, `DEBUG`, `CI`, and tool-specific prefixes.

references/tuicfg-flags-over-args.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicfg-flags-over-args.md Description: --- title: Prefer Flags Over Positional Arguments impact: MEDIUM impactDescription: reduces user errors by 50% through self-documentation tags: tuicfg, flags, arguments, cli, parsing --- ## Prefer Flags Over Positional Arguments Use named flags instead of positional arguments for most options.

references/tuicfg-help-system.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicfg-help-system.md Description: --- title: Implement Comprehensive Help System impact: MEDIUM impactDescription: enables self-service and reduces support burden tags: tuicfg, help, documentation, cli, usage --- ## Implement Comprehensive Help System Provide thorough help accessible via `-h`, `--help`, and running without arguments.

references/tuicfg-json-output.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicfg-json-output.md Description: --- title: Support Machine-Readable Output Format impact: MEDIUM impactDescription: enables scripting and tool integration tags: tuicfg, json, output, machine, automation --- ## Support Machine-Readable Output Format Provide a `--json` flag for machine-readable output.

references/tuicfg-sensible-defaults.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicfg-sensible-defaults.md Description: --- title: Provide Sensible Defaults for All Options impact: MEDIUM impactDescription: reduces friction for common use cases tags: tuicfg, defaults, options, ux, cli --- ## Provide Sensible Defaults for All Options Every configurable option should have a sensible default.

references/tuicomp-border-styles.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicomp-border-styles.md Description: --- title: Use Border Styles for Visual Structure impact: MEDIUM impactDescription: reduces visual parsing time by 30-50% tags: tuicomp, borders, styling, visual, box --- ## Use Border Styles for Visual Structure Use Box borders to create visual grouping and hierarchy.

references/tuicomp-box-flexbox.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicomp-box-flexbox.md Description: --- title: Use Box Component with Flexbox for Layouts impact: HIGH impactDescription: eliminates manual position calculations tags: tuicomp, box, flexbox, layout, ink --- ## Use Box Component with Flexbox for Layouts Use Ink's `Box` component with Flexbox properties for layouts instead of manual character positioning.

references/tuicomp-measure-element.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicomp-measure-element.md Description: --- title: Use measureElement for Dynamic Sizing impact: HIGH impactDescription: enables responsive layouts based on content tags: tuicomp, measure, dimensions, responsive, layout --- ## Use measureElement for Dynamic Sizing Use `measureElement` to get computed dimensions of rendered components.

references/tuicomp-percentage-widths.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicomp-percentage-widths.md Description: --- title: Use Percentage Widths for Responsive Layouts impact: HIGH impactDescription: prevents overflow on 100% of terminal sizes tags: tuicomp, responsive, width, percentage, layout --- ## Use Percentage Widths for Responsive Layouts Use percentage-based widths instead of fixed character counts.

references/tuicomp-static-for-logs.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicomp-static-for-logs.md Description: --- title: Use Static Component for Log Output impact: HIGH impactDescription: prevents log lines from re-rendering tags: tuicomp, static, logs, output, scrollback --- ## Use Static Component for Log Output Use the `Static` component for content that should be written once and never re-rendered, like log lines or command output.

references/tuicomp-text-styling.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuicomp-text-styling.md Description: --- title: Use Text Component for All Visible Content impact: HIGH impactDescription: prevents 100% of styling bugs from raw strings tags: tuicomp, text, styling, colors, ink --- ## Use Text Component for All Visible Content Wrap all visible text in the `Text` component.

references/tuistate-cleanup-effects.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuistate-cleanup-effects.md Description: --- title: Always Clean Up Effects on Unmount impact: HIGH impactDescription: prevents memory leaks and orphaned timers tags: tuistate, useeffect, cleanup, memory, timers --- ## Always Clean Up Effects on Unmount Return cleanup functions from `useEffect` to cancel timers, close connections, and release resources when components unmount.

references/tuistate-functional-updates.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuistate-functional-updates.md Description: --- title: Use Functional State Updates to Avoid Stale Closures impact: HIGH impactDescription: prevents stale state bugs in callbacks tags: tuistate, usestate, closures, callbacks, hooks --- ## Use Functional State Updates to Avoid Stale Closures Use the functional form of setState when the new value depends on the previous value.

references/tuistate-useapp-exit.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuistate-useapp-exit.md Description: --- title: Use useApp Hook for Application Lifecycle impact: HIGH impactDescription: prevents terminal state corruption on exit tags: tuistate, useapp, exit, lifecycle, cleanup --- ## Use useApp Hook for Application Lifecycle Use the `useApp` hook to access application-level controls like `exit()`.

references/tuistate-usecallback-stable.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuistate-usecallback-stable.md Description: --- title: Stabilize Callbacks with useCallback impact: MEDIUM impactDescription: prevents unnecessary re-renders in children tags: tuistate, usecallback, memoization, performance, hooks --- ## Stabilize Callbacks with useCallback Use `useCallback` to memoize callback functions passed to child components.

references/tuistate-usememo-expensive.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/tuistate-usememo-expensive.md Description: --- title: Memoize Expensive Computations with useMemo impact: MEDIUM impactDescription: avoids recalculating on every render tags: tuistate, usememo, memoization, performance, computation --- ## Memoize Expensive Computations with useMemo Use `useMemo` to cache expensive calculations that depend on specific values.

references/ux-color-semantics.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/ux-color-semantics.md Description: --- title: Use Colors Semantically and Consistently impact: MEDIUM impactDescription: reduces time-to-comprehension by 2-3× tags: ux, color, semantics, accessibility, styling --- ## Use Colors Semantically and Consistently Use colors to convey meaning, not decoration.

references/ux-error-messages.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/ux-error-messages.md Description: --- title: Write Actionable Error Messages impact: MEDIUM impactDescription: reduces user frustration and support requests tags: ux, errors, messages, actionable, help --- ## Write Actionable Error Messages Error messages should explain what went wrong and how to fix it.

references/ux-intro-outro.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/ux-intro-outro.md Description: --- title: Use Intro and Outro for Session Framing impact: MEDIUM impactDescription: improves perceived quality by 30-40% in user studies tags: ux, intro, outro, framing, clack --- ## Use Intro and Outro for Session Framing Frame CLI sessions with intro and outro messages.

references/ux-next-steps.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/ux-next-steps.md Description: --- title: Show Next Steps After Completion impact: MEDIUM impactDescription: reduces support requests by providing clear guidance tags: ux, onboarding, guidance, workflow, help --- ## Show Next Steps After Completion After completing an operation, show users what to do next.

references/ux-progress-indicators.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/ux-progress-indicators.md Description: --- title: Show Progress for Operations Over 1 Second impact: MEDIUM impactDescription: prevents perceived hangs and user frustration tags: ux, progress, spinner, feedback, latency --- ## Show Progress for Operations Over 1 Second Display progress indicators for any operation taking longer than 1 second.

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
48
Files Flagged
48
Chunks Analyzed
48
Analyzed
Feb 21, 2026, 11:37 AM
Security Audit — runlayer — terminal-ui