animated-chart
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the Chart.js library from the JSDelivr CDN (
cdn.jsdelivr.net), which is a well-known and reputable service for open-source library distribution. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied images to extract data points for chart generation. This represents an ingestion point for external data. However, because the instructions direct the agent to extract structured data into a specific visualization template, the surface for instruction-based injection is minimal.
- Ingestion points: User-provided image analysis (SKILL.md, Section 1).
- Boundary markers: None explicitly provided in the skill instructions.
- Capability inventory: Writing a standalone HTML file containing client-side JavaScript.
- Sanitization: Relies on the agent's interpretation and extraction of specific chart data types (values, labels, colors).
Audit Metadata