make-figures

Pass

Audited by Gen Agent Trust Hub on Nov 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/fetch_official_templates.sh retrieves official research reporting templates (PRISMA, CONSORT, STARD, SPIRIT) from reputable organizations including prismastatement.org, consort-spirit.org, and equator-network.org.
  • [COMMAND_EXECUTION]: scripts/generate_visual_abstract.py invokes the LibreOffice command-line interface (soffice) to convert PowerPoint templates into PNG images. The execution is handled securely using argument lists rather than raw shell strings.
  • [DATA_EXFILTRATION]: scripts/generate_image.py provides an optional feature to generate medical illustrations by sending prompts to the Google Gemini API. This functionality requires a user-configured GEMINI_API_KEY and contains no hardcoded secrets.
  • [DYNAMIC_EXECUTION]: Configuration files for flow diagrams and templates are parsed using yaml.safe_load() in several Python scripts, which is the recommended secure way to handle YAML data.
  • [SAFE]: The skill implements a mandatory 'Data Privacy Check' in its core instructions, requiring the agent to confirm the absence of patient identifiers (PHI) before processing CSV or Excel data files. Additionally, it includes automated structural verification for generated figures to ensure accuracy and compliance with scientific standards.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 1, 2026, 03:22 PM