web-dataviz-d3
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation and examples for D3.js. It does not involve dangerous command execution, sensitive file access, or network exfiltration.
- [INDIRECT_PROMPT_INJECTION]: The examples demonstrate using D3's
.html()method to render tooltips from data properties. 1. Ingestion points: User-provided data arrays likedataorgeoData(seen inexamples/advanced.mdandexamples/interaction.md). 2. Boundary markers: Absent; data values are directly interpolated into HTML strings. 3. Capability inventory: DOM manipulation and attribute updates usingd3-selectionacross all example files. 4. Sanitization: Absent; the patterns focus on library functionality without explicit input validation, identifying a standard web vulnerability surface.
Audit Metadata