alterlab-scientific-viz
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
Bash(python:*)tool to run visualization scripts using matplotlib, seaborn, and plotly. This is intended behavior for data plotting and uses established libraries. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to generate plot labels and annotations. While this introduces a technical surface for indirect instructions, this is a standard risk for visualization tools and aligns with the intended functionality for creating data-driven figures.
- [SAFE]: No malicious patterns, obfuscation, or unauthorized network operations were detected. All scripts and references focus on legitimate scientific visualization tasks.
Audit Metadata