metagenomic-krona-chart
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate data processing and visualization. The core logic in
scripts/main.pyis dedicated to parsing taxonomy data from Kraken2/Bracken reports or custom TSV files and mapping them to Plotly sunburst charts. - [EXTERNAL_DOWNLOADS]: The script generates HTML files that reference the Plotly JavaScript library via its official CDN (
cdn.plot.ly). This is a standard and expected behavior for generating interactive web visualizations using the Plotly library, which is a well-known service. - [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute a local Python script (
scripts/main.py). The command-line interface is well-defined, accepting input paths, output paths, and visualization parameters (thresholds, depth). No evidence of arbitrary command injection or shell execution was found. - [DATA_EXFILTRATION]: File system operations are restricted to reading specified input data and writing the visualization results. There are no patterns suggesting the harvesting of sensitive files (e.g., credentials, SSH keys) or transmission of data to unauthorized external endpoints.
Audit Metadata