infographic-creator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill generates HTML files that load the
@antv/infographiclibrary from theunpkg.comCDN. This library is a resource associated with the vendor and is required for the skill's visualization functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text and interpolates it into a generated HTML file. This creates an attack surface where untrusted data is placed directly into a script context, which is inherent to the skill's purpose of rendering user-supplied information.
- [DYNAMIC_EXECUTION]: The skill dynamically generates a complete HTML file at runtime that includes JavaScript code for initializing the infographic renderer and processing the data structures.
Audit Metadata