figure-style
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements logic for publication-grade scientific plotting. The Python code in
kernel.pyandtest_kernel.pyuses standard data science libraries (Matplotlib, NumPy, SciPy) for geometric calculations and styling. - [EXTERNAL_DOWNLOADS]: The skill does not perform any network requests or downloads. It relies entirely on local system fonts and installed Python packages.
- [COMMAND_EXECUTION]: There are no shell command executions, subprocess calls, or system-level modifications.
- [DATA_EXFILTRATION]: The skill does not access sensitive files or credentials. File operations are limited to searching for
.ttffont files in standard environment paths (CONDA_PREFIXorsys.prefix) to support rendering. - [PROMPT_INJECTION]: The instructions in
SKILL.mdprovide clear, technical guidelines for scientific visualization and do not attempt to override the AI's safety protocols or core instructions. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user data to generate plots, the plotting functions (
bar_with_points,strip_with_median) include strict validation that enforces numeric, finite data types. This prevents the ingestion of complex objects or text-based payloads that could be used for injection attacks. - [DYNAMIC_EXECUTION]: The layout verification logic in
SKILL.mduses standard Matplotlib API calls to check for bounding box overlaps. It does not useeval()orexec()on untrusted input strings.
Audit Metadata