make-figures
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/fetch_official_templates.shretrieves official research reporting templates (PRISMA, CONSORT, STARD, SPIRIT) from reputable organizations includingprismastatement.org,consort-spirit.org, andequator-network.org. - [COMMAND_EXECUTION]:
scripts/generate_visual_abstract.pyinvokes the LibreOffice command-line interface (soffice) to convert PowerPoint templates into PNG images. The execution is handled securely using argument lists rather than raw shell strings. - [DATA_EXFILTRATION]:
scripts/generate_image.pyprovides an optional feature to generate medical illustrations by sending prompts to the Google Gemini API. This functionality requires a user-configuredGEMINI_API_KEYand contains no hardcoded secrets. - [DYNAMIC_EXECUTION]: Configuration files for flow diagrams and templates are parsed using
yaml.safe_load()in several Python scripts, which is the recommended secure way to handle YAML data. - [SAFE]: The skill implements a mandatory 'Data Privacy Check' in its core instructions, requiring the agent to confirm the absence of patient identifiers (PHI) before processing CSV or Excel data files. Additionally, it includes automated structural verification for generated figures to ensure accuracy and compliance with scientific standards.
Audit Metadata