build-dashboard
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Content Delivery Networks: The skill includes references to Chart.js and date-fns libraries hosted on jsDelivr, which is a well-known and widely used content delivery service. The implementation utilizes Subresource Integrity (SRI) hashes to verify the authenticity of these external scripts.
- Dynamic Script Generation: The primary function of the skill is to dynamically generate self-contained HTML, CSS, and JavaScript. This involves assembling executable code at runtime to create interactive visualizations and layouts based on user requirements.
- Data Ingestion and Processing: The skill is designed to process data from various sources to populate the dashboard. 1. Ingestion points: Data enters the skill via the [data source] argument or content provided by the user as outlined in SKILL.md. 2. Boundary markers: While the skill instructions recommend that the agent parse and clean the data, the provided HTML and JavaScript templates do not employ specific boundary markers within the embedded data variables. 3. Capability inventory: The skill is capable of creating and saving HTML files to the filesystem as specified in the Save and Open section of SKILL.md. 4. Sanitization: The JavaScript templates use common web development patterns, such as string interpolation and innerHTML, to render data into the dashboard's tables and KPI cards.
Audit Metadata