html-visualization
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python script (
scripts/scaffold_visualizer.py) to generate HTML artifacts. This script is called with arguments determined by the agent to create the final visualization. It uses standard Python libraries and performs HTML escaping on all input data before rendering it into the template, which effectively mitigates the risk of Cross-Site Scripting (XSS) in the resulting files.- [SAFE]: The skill's architecture is well-organized, with a clear separation between logic (scripts), presentation (templates), and guidance (references). The behavior described in the instructions is consistent with the provided code.- [SAFE]: No instances of prompt injection, data exfiltration, hardcoded credentials, or obfuscated code were found during the analysis. Network activity is limited to referencing standard external assets (e.g., images) in the generated HTML, which is expected for visualization tools.
Audit Metadata