make-figures

Pass

Audited by Gen Agent Trust Hub on May 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/fetch_official_templates.sh is designed to download official medical reporting guideline templates (PRISMA, CONSORT, STARD, SPIRIT) from authoritative and well-known domains such as prismastatement.org, consort-spirit.org, and equator-network.org for use as figure anchors.
  • [COMMAND_EXECUTION]: The script scripts/generate_visual_abstract.py utilizes the Python subprocess module to execute the LibreOffice CLI tool (soffice) in headless mode. This is specifically used to convert generated PowerPoint visual abstracts into PNG images for publication review.
  • [SAFE]: The skill incorporates a proactive 'Data Privacy Check' in SKILL.md, which instructs the agent to scan for potential Protected Health Information (PHI) in user-provided data and recommends de-identification procedures before processing. Additionally, the skill's dependencies (such as python-pptx, matplotlib, and lifelines) are standard, well-maintained libraries for data visualization and document generation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 5, 2026, 12:29 PM
Security Audit — agent-trust-hub — make-figures