chart-generator

Pass

Audited by Gen Agent Trust Hub on Jun 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill operates as an interface for a remote chart generation service. It defines a single tool, generate_chart, which accepts structured data and returns image URLs or base64 data. There is no evidence of local command execution, privilege escalation, or persistence mechanisms.
  • [SAFE]: Network operations are restricted to the author's official domains (agentpmt.com) and well-known hosting services (clawhub.ai). No data exfiltration to unknown third-party domains was observed.
  • [SAFE]: The ingestion of user-provided data into the data parameter for chart labels and values represents a minimal surface for indirect prompt injection. Since the output is a static image and the skill does not possess autonomous execution capabilities (such as shell access or file system writes), the risk of instruction obedience from this data is negligible.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 24, 2026, 07:41 AM