Data Visualization
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions define a method for consistent and accessible data visualization. No prompt injection, obfuscation, or malicious patterns were detected.
- [SAFE]: The included validation scripts (
scripts/validate_palette.jsandscripts/validate_palette.py) perform local calculations using the OKLab and OKLCH color spaces. They do not utilize any network or file system operations and include robust hex color validation. - [SAFE]: The skill promotes defensive security practices for handling untrusted data. It identifies that visualization labels sourced from external inputs (e.g., CSV headers, API responses) should be treated as untrusted and requires the use of
textContentinstead ofinnerHTMLto prevent cross-site scripting (XSS). Ingestion points: CSV headers, API responses, tool output. Capability inventory: HTML/SVG rendering. Sanitization: usage oftextContentorcreateTextNodeinstead ofinnerHTML.
Audit Metadata